MAL-2025-145293 Malicious code in native-puppeteer-sagitta-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc702e7575891810cd4a5ab2a9525d3febdae7b77ac6c98e96db321068d74f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-backend-hyperion-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d599aba9fe19b87f3943393ecd230d276051184bf752cc0349302bd40a0357b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-elektra-build-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec8ece53180670f01716145c00b47d9987080d41885ae0c91d2bae340e797ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-triton-parcel-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8372b0b0a4a35d0ca5d0bee3fc0d38c81f4d15095069255d4921454a2bfb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-crimson-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5b6e4a78baf905a10782b5a03a2a856c6bdb3efed1732c275f56a02d6729a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-aquamarine-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32f5718e443805eb02a3691956a419c256d64ca58ca06e0542eae0d60502e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-aqua-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e11b87589692e13378e5884ac74613c33bf2d49738f658f6a26fe123f4a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-dodol86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a85c531a3a7ed198c4a3b5c83c9ffe82a7490b9988d9553bb7950fd9aeea9fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-rujaksoto74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa5cd281540f518b4ab9a345a53c908f7b962f8c1a28780c4d0cc7fa4f8079c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-buburayam90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0b9004eaeb8563e7ab328462820cd4d26b1391d828685751f9fc4e431093b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-botok20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f636958dea207f96613d2abd453f3d34307f6ef5ce149547300c77aa8e2011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-nasi21-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeae63c75bed8a43a94034315f4de16f3d7f90f968fb65c9b50b052018bde40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138237 Malicious code in yanti-kupat42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dba459c436f6facfeea0d7e0c1af78498f16f2cf5aa35eb6f4c54242b6780d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-oblok4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74977c572b7ebeeb3dbecb6a875250474c1d781518a1370a82108f9094f9603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135021 Malicious code in kurniawan-pecel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c6e1ea2145b0c33ab595ad1c9bef4546a163bd7bdd923d6d16efca52048cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137070 Malicious code in spiritual_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391120043faa36d24d035bfa28cad71604ace985a1e17b7e9f052bcdf52a9326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135058 Malicious code in laila-dodol71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476227672f6ca4644a5d80cb62d9637fcc09c73651f12f0cd384ec04f93ffb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135936 Malicious code in ocha-keraktelor33-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba68f5be3577f9e8249545e947d6a505f54683f09c11acfd844eeed75346490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136508 Malicious code in qori-serimuka87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2719ffc4a1d99a92bdf712fc4921eb2fb5357e8b5ecaaabf7f80053806c045af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...