MAL-2025-187015 Malicious code in forever-webpack-whitedwarf-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f85ce66b9434c76d765850c0f87b8bb5f6a0e8866475ac5d2789354a914601c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-reeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d33841b83f5cd507871f5a2f38c665f2a5c59cf0cd43783f41fe919bcf24ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174082 Malicious code in divata-tugabui-iumavifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6145befd1f8e3146a0a7e757321e2b898b06cd29159122e0ce8e249228f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guide-matila-unpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107e3768e1cf476a16d26733245de2fb4c03a6bf5571f9f6b3a762518f2b2b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avoh-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517ac39d3e26768159596b38252e9a9902bd603ecc34a74d4f5a7b3ad7eb4d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foa-jafulifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d4331c74432a67e9e5174a8cafe88e295483d418a943f1b5294b487d30f66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156280 Malicious code in ilop-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b415ab8fe2c59c58608086fcd907ea41b41cd51338b1c9a7631b2f98ca1d24b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148506 Malicious code in telesto-wezen-mira-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c54640330a7c458d507a8b7649de4017b059ecab3bba9f5938aeb85fce4cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149581 Malicious code in writable-supervisor-zenobia-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50daf5591e2972fde227a78418365d4f057660287ba31db763855088858763ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141060 Malicious code in configstore-prettier-css-loader-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9b61611b12beafaab6b312ac0c7e46444736a1d2d38ba6ca30138be65e83ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137538 Malicious code in umi-kue30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41748fe7f239da0aa1ce566a40c795ff71a24821613bf4a7822fb9cfa1cfd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132587 Malicious code in compact_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ec243bd2b7927a25f38e8ca44a8d974f6e8a900df1f5cefe8f80ffc884462e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-nasi49-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145aa8767d8ce484832cbc67ac380f66d2e4df75e72b0c561304180e99fb4350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72025e40b3974134ffb748329c6f43e83beeaa56ab05ab3f597ab744cf9a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-brengkes38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d29e9aa211656420f0a856db4e56d8c05ab073a13c441545d2f36fbb5a7eac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121954 Malicious code in nadia-kolak9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4bb4282918b0d3c32540d981165cf9ee53d55d3f23e67b1e573cb17fad091f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123200 Malicious code in shocked_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff1297db3e8a0896b423cd67421bdb8b5b829a98518388868347490ba7e68fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5a24650260dfc68470159dc207fc4ec9ec11227a778c2abbad65ba8155e94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117421 Malicious code in tiara-lapis36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a534faad158397274e92b30d6f4140e8d6a66c21d4976e48c741712fd3a2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103387 Malicious code in grim_swordtail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca3672ed14c86ac7394285297a6f72ca3e8bbd7d556c9c11e61df735cc4d0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...