MAL-2025-141966 Malicious code in element-ui-eslint-config-public-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d99fba2f44200f3296285a80e418e2f25948a481617833ae4387d2e340e260c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145293 Malicious code in native-puppeteer-sagitta-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc702e7575891810cd4a5ab2a9525d3febdae7b77ac6c98e96db321068d74f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147511 Malicious code in rollup-plugin-changelog-oberon-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7587ffdb4cf843ecc0d5d44895d41406018eb6be3d4fa04943f6d13f0b1684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144672 Malicious code in magellan-update-config-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e022d5f7a1ea9234ca46dc22df14140afb67de5bdabe0b2e912b051cfd9228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-aqua-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e11b87589692e13378e5884ac74613c33bf2d49738f658f6a26fe123f4a6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-aquamarine-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32f5718e443805eb02a3691956a419c256d64ca58ca06e0542eae0d60502e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-crimson-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5b6e4a78baf905a10782b5a03a2a856c6bdb3efed1732c275f56a02d6729a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-dodol86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a85c531a3a7ed198c4a3b5c83c9ffe82a7490b9988d9553bb7950fd9aeea9fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135058 Malicious code in laila-dodol71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476227672f6ca4644a5d80cb62d9637fcc09c73651f12f0cd384ec04f93ffb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135936 Malicious code in ocha-keraktelor33-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba68f5be3577f9e8249545e947d6a505f54683f09c11acfd844eeed75346490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132166 Malicious code in bambang-kacang37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d611213cfc35667afd425acec844c3d1c6cad4eb07754343a7ff3973da4a320e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137070 Malicious code in spiritual_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391120043faa36d24d035bfa28cad71604ace985a1e17b7e9f052bcdf52a9326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-rujaksoto74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa5cd281540f518b4ab9a345a53c908f7b962f8c1a28780c4d0cc7fa4f8079c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135021 Malicious code in kurniawan-pecel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c6e1ea2145b0c33ab595ad1c9bef4546a163bd7bdd923d6d16efca52048cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136508 Malicious code in qori-serimuka87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2719ffc4a1d99a92bdf712fc4921eb2fb5357e8b5ecaaabf7f80053806c045af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138237 Malicious code in yanti-kupat42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dba459c436f6facfeea0d7e0c1af78498f16f2cf5aa35eb6f4c54242b6780d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-oblok4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74977c572b7ebeeb3dbecb6a875250474c1d781518a1370a82108f9094f9603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-botok20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f636958dea207f96613d2abd453f3d34307f6ef5ce149547300c77aa8e2011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-buburayam90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0b9004eaeb8563e7ab328462820cd4d26b1391d828685751f9fc4e431093b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...