MAL-2025-142580 Malicious code in fork-carpo-commitlint-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0423df45702b5cbc37baf7e71d078b0f9562cb82dc97e1f947dad1e3501d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141388 Malicious code in cygnus-upgrade-frontend-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efd3889cc38715cfa87373999a9ac8a9bc9757e20af388aa69dd89fa580fa57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149380 Malicious code in webdriverio-private-orbit-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c34effd25ed669028b7d3c9e64deb8764cf09db0a0d658a5a7103f33a904ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148572 Malicious code in test-exec-terser-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b44c74c5719b6b3b0b0065dc5a854564569798ee2d397b1a35c9236842fb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139195 Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-cyan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85ee89f191c9a7dedcc977749bc2c118ee67eefa80d30c38aea5e284c2f35d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139099 Malicious code in victorious-gray-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8db8ed4892456becbc29f75ca434b652639869fa93ca9660a234ff93e9284f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139055 Malicious code in supreme-coral-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86131409d2aa2ed279d0bc1cfea382880cce3ad9c98a681bae69f9c2f785638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139109 Malicious code in weary-gold-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb537506129c047276d89848302b0b0473a71b053fd629477018dd84e2163b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdefd90eb63079c9382cb7876632ed6982494906d62aad96a9598fb35b715e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-getuk54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1fae2a9531e565527f4b81ac837b9c2219d38307262d3c4d30f494b4b856d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-klipo19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8897238f96fd9d928b35b2272ed9def332497df373345ff2272fa47b2e8431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133159 Malicious code in erick-ronde6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac59b359cc2209f2b75817d7271a6e1dbddde50ec8c47043588ef18ceef4c92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138116 Malicious code in xaver-gulai92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2454368eb3d668ffc1849aaf9ae0ebadaba052f7b895107d11542fa3a48369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135824 Malicious code in nina-rangi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a148e7c7fbe310177bdcd0d2d3ddc71f6fb1a09eaecbaa112bc3deca408e7c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kentang73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989cf3fae8c3a3d8e6352fb0fc22ae139c88385f6529babc3b78e5191e4aece4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-serimuka21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcac6e332f084d42067e8ee042c0d0c0eed896c5512431c0be9e6b8ee233857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-nasipecel32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99477926b21e96bfb4a26999e59bed6d4daa57068674ee61af94a1bd787cbe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-jamblang87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b661e8c0f83f80a7e1d60a155b3d5f68749780e7735e351086afb151aeb037a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...