MAL-2025-145218 Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139865 Malicious code in babel-jovian-despina-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2823367bbc3c7c96040c5a58d99c6d21a66d43a7f43c856472b6e49615b3b84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142277 Malicious code in europa-kaus-ini-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b8eddeae826b1fb99b6c944ce28b1eeec45196af20edf767f02e9c7e31ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142485 Malicious code in figures-version-carina-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3513c6b2aae948d358ed83dec49f13f53edd21ddd9d26e0a8146e9d9bfc18824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142790 Malicious code in galaxy-karma-restart-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64caec3afd9589b18de53d7cb1fa655578c4d3baa58c69faf1441ec3b4cf0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148883 Malicious code in uglify-js-spectron-colors-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ca0d32d9252e9391a2a4897d756ec63df61d8558401790307a3a375ad8f331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-bronze-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16146e4d4857e60713ef61c9a814a154e55f4841549b6a218394b458f93f4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138785 Malicious code in hurt-teal-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f124b2b9ae4a334e270a929e075ffe74689941d78356cfb0a02d6c2b73f918a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62aab83b229f1c952900829d0f175bd8beb8f48ea89b633bc6fb55ef4cbdafbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-sambalado17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efa068d6a34e4151dda1a30b9840b4335a6d388d1d23c96770141a31bba527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-gepuk59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbbdc7e24dcc454b886801e60e1fdecc073ab5b7a15139c7245cb714da805fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-takokak57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb119f3ccdd3a2355a6878a17742125a59a8fe55f176659aa8a6b55a2b1218c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kacang22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa3430a55d3c5f027fe863c5159a523ab5062fd52e434241c01a36d95be29cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-toge70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e45d1e70e6401835729dd6cee2a8021727c3a158edefecefff40249f4a3965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bc92e195d9a0da36a7439b75fa924797aa694143c960e2e6706b1077936c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kripik48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080a9418fbf38aebeff9ae57e62216908fcaf48adf4167ca84dc8cf32a2437ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-semur73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286293f5ca1bc0bfa4efd9fadabd5483c235ed56821ecd819417be16841d4c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...