MAL-2025-146317 Malicious code in pm2-yakutsk-config-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2e5255e395d97c0c19ad124a7bb7e09a8bac51d104ca36b700752cb833313b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146170 Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148444 Malicious code in tailwindcss-iota-materialize-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8814d15fdbca9a55d84e73b3267423a3ce4f89f505a49f9cb4f368e08ddcbb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142089 Malicious code in envconfig-writable-spectron-webdriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755591c551de8c2c5232708dbb1a9adef2f6add41727bc872a1cfe2b72206ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149639 Malicious code in xanthus-xerxes-zenith-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaab4f3ea217467a70f14e891243628cfce6deba769208c9cb54a6e06db8786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138581 Malicious code in adequate-purple-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65d9ed90c6b0e40b3541d480b9b1ba126f97ee1c1a5ff0683824c7d064fa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138903 Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117068

Malicious code in spotty-green-mouse npm...

Malicious code in grateful-aquamarine-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5352403d2c82ea93e9612c7592d466b84ba466cd6f4bc1dadbc563994fead63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-tomato-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286c81453c169eb334dd954a990db761b5fe48b124e4132b65092030af1cf1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-keraktelor67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69070965056546d2591a01db2fb1a18b3b77437c8d5c48cef398ea2960b21265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-teh29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221d9fe2fee42b7e3f88fdc3c589fe0f053afabc3bf21c1867b01dde7a9da9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132317 Malicious code in budi-keraktelor50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb40dd6b3452d68c0ecbd8d8bcec1744b391e971049b5b6c6fa8caab34685ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lodeh89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef335d0cd7ee7e4c18d79d10ec472237931757dd7f095f741cdfcc1ae7531b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-gaplek74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b95b3b1a2489f422f4b48e1e038fe1be36e506c54561ff57335ad8ec97b412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-sambel59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8e04e72621409c47f47333be2e974ad991682c58463982d574a90dfa154f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lumpur75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e37b32452a284d138676acef25038a22c48d46f20bc27cdfbf51f809f0c0acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134803 Malicious code in kiki-kue64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5faab8afd3130212129665acc6bbd801d6cefcff9bbbfea8987c6a062891aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138574 Malicious code in zul-toge84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500128b509918acd84abb6326569897b44ee1424de7dd9bce9a6808698a6b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...