MAL-2025-141090 Malicious code in convict-rollup-plugin-buffer-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1699050cc592e2f8d30b48677a2a5a646c3a34aec6b04b98382047a46574ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-mangut28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4caf7249430460f1785b211252626e612f290e0cc0db90d5978c297efb2eebaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b532b16201be02b11ba1ee633cd1b2ff94324d565f1ba48ae2558bda61a61cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mie27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63aae37ee3c5fe181f6fcd7a473c6e0d47b295d68ef66c25dd31175b62bbbe99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-klipo40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61f0f7448a079dba6a7c99971181589b560f02481b8458c2152c6fafafca3e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-empal41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264b059580b407a12d0795e8ad2293f9a01787f4354fa9af22e9a7371ca055d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129740 Malicious code in resonant_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06374d82ab0d42cc0c0f07d8084d4cc978b7b8c7af8684baf4d0198be9b60b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128770 Malicious code in nadia-lepet51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4942566d24f28018bd075ce72c07bbb3bb00d30424803be031ba546c3f60386f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lumpur65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b5e9cfe055dcaf46a6ddce5d29f374457223f83c1019b607b0181e1d76d53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120041 Malicious code in few_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ed54736287fcec49cd918d3b57f8d288fdb679d0e17c0f4631a70492c53c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befa7068bf47e4a4b67f14c80bf46cce3426d1dc8b04bd925d3eb84d1cfdfaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c76878e192addd11503da49704b65ef88cbd62303f15d88a6fc49db0095b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124096 Malicious code in vina-lengko64-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb30ab29282b623e3de356e642bf96ec3a9304a82adf0b9a3de3e0bfd93ed784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113907 Malicious code in fascinating_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab95acb50f19e123d8a1e0d86705572819cfc8741a6d547f2d7c26301e636173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-sasag96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ed30aa2fe03d9d3e322840cf568cadebe2ef8ae4038507216f1d06eb174bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b7d9aa7bf3c9bc2f32372d03b8ac9cf0b77833fe4e440dca8dcd47ffbaa599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5cbd69a4a77bc5ada2048c3c208d53c46c98856e2b2a37f8eddba9b5c3e885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112725 Malicious code in arrogant_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e56fbec1cc916d14c36b52436b85035ca8a55de256f18e80feb81b6e4ddf0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103831 Malicious code in huge_monkey-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbc04b1760624ecc3e1d64ad83ac69cb035bebe31243592ef2f25600f0d6954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous_turtle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e82dc3b0f97ce480be96933a5077ed96fee580fe52e3f6cc907c9e63e0131e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...