MAL-2025-142298 Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139935 Malicious code in bellatrix-element-ui-native-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d1043cedb1fdedef8a8f3bc8f478c9b74d28d60356cae5f3555fb9b7ae998c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-css-loader-json-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ed9e0c56378cf0db01dbf06e8ed7f5f59821afc593e4fc9501eefb82615d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143177 Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-frontend-polaris-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98de682754ce3065d56369af1fab524ac4f432d751667af0eede0e70a94a05cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-testcafe-uglify-js-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e77fb847e27eb950028a1cd40aca131cc9aa67d47344651081fc40be03e6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-chromedriver-flare-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c39fe3bba442aca2cda6e7c18a2ffa40c87639f81952046f80fbff313e601f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-beige-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e48972d96ed25c00f6d2160d9dbda71c1c211617388949b22114b8da3fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139049 Malicious code in striking-tan-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61c22239077633e5a19a69a5a14161c6d1ed6230bfdbefec065a2d46f2355b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tek91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2e254cab3f5e63229856e8c94bf1920f0bad8d12cc080fde3493bdcc001f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4558942046c30d77b8821fbfab74a9f445ddb9bf1fac44983226426505088dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-buburayam85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e430bccda15eb891d8696f17e1df130fbc9e4b661841502907f6303788f3e1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-lengko13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0d7e80c27608f8f6a64bc4595a92a693a8fa057343f027886a5805f939f449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-tek59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4248990f86eb95ffd8f6ccc374aeb47f7613ebbe6593bb0491a5b41b38aa5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tongseng94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf4061634659b72d1a63c42448aa97fa1af6cdbe3aa976fd69e46208f96e48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lumpur78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6ac591e15ffffd5ad9be24095c49c834a894eaede9ac831f3e9ef146323e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kupang99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9184f78ee3b7278d7964b7246bb6c6f89e2f6dea5f447b427c5bdd16681a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-mendut45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79113c3d1137ec213b758d60a54e52caa23e889cb395b9cd37f17c740846a974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...