MAL-2025-145297 Malicious code in native-venus-kastra-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af819cc7c6039a99830cec4ec922f20689dda1cdf403e00756c32a48533001a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145218 Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139173 Malicious code in acamar-dagda-koa-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ca820a2561e3af6c3516d615cf56b1e30662bed8bbd8fd6d0ea9752e2b338c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143401 Malicious code in hugo-solis-unuk-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a358ae0338cacfaa7981c4514eab086f65c8e99c8212c3a925d86e5c82ebff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143334 Malicious code in hermes-xml-auth0-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c611aff8a4e335a1a4820c2a72eac66c8e27637a83e7aa8e9fa29618dfaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142277 Malicious code in europa-kaus-ini-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b8eddeae826b1fb99b6c944ce28b1eeec45196af20edf767f02e9c7e31ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142485 Malicious code in figures-version-carina-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3513c6b2aae948d358ed83dec49f13f53edd21ddd9d26e0a8146e9d9bfc18824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146289 Malicious code in playwright-yonder-module-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a88d8d6c9de0dc9811395ffc27c01a2b4ffde660a8f412ebbeaa8db6930e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-bronze-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16146e4d4857e60713ef61c9a814a154e55f4841549b6a218394b458f93f4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138785 Malicious code in hurt-teal-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f124b2b9ae4a334e270a929e075ffe74689941d78356cfb0a02d6c2b73f918a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tiwul5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25212e87e88f94a028b4e55e120315ea25f10f35c766e7e1a20dc6861804237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-pisang7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70f97bbf134e7fbebf4e99e1f7b536884f177ab1ed346bfcabdc1a4098ef56b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bc92e195d9a0da36a7439b75fa924797aa694143c960e2e6706b1077936c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-takokak57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb119f3ccdd3a2355a6878a17742125a59a8fe55f176659aa8a6b55a2b1218c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-ragi25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea80150d625d27c088488744acb9c4726d24eee77420fd1f1ef7fb63548f588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tiwul82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad2b2d41bb24ccf6bdb533689672298df00b70b8fd03997a0d9b2e0842680cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29776bbfaed7c4b03464e14a7f5fa53a2b6fda742f65fe0dc5a7e2fca590037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-semur73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286293f5ca1bc0bfa4efd9fadabd5483c235ed56821ecd819417be16841d4c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kripik48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a9418fbf38aebeff9ae57e62216908fcaf48adf4167ca84dc8cf32a2437ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...