MAL-2025-141596 Malicious code in despina-fusion-typeorm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40abb8a24d7c690b5112addea229e5308d47adda807501e929ab97cdaacc57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145194 Malicious code in mui-apollo-transport-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e66318ce09120e6b5ef2505cdd3821e25d5abc7bf54a8e2a36bfd13731808b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143229 Malicious code in helios-css-loader-kastra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145804 Malicious code in odin-venus-enif-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d086f3c3518497d4ae4dcee831d523bd73b0a05e4467a5ba429f860ddb95cae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143076 Malicious code in grunt-sails-astro-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118a3909898666efc110e25978ce2c8ebec152db2edc41191d6cd9849fc4c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143177 Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-beige-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e48972d96ed25c00f6d2160d9dbda71c1c211617388949b22114b8da3fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139049 Malicious code in striking-tan-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61c22239077633e5a19a69a5a14161c6d1ed6230bfdbefec065a2d46f2355b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kupang99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9184f78ee3b7278d7964b7246bb6c6f89e2f6dea5f447b427c5bdd16681a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-mendut45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79113c3d1137ec213b758d60a54e52caa23e889cb395b9cd37f17c740846a974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-sate84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1238a43a54d11827f889ecf49cdb6d4c773a48063983294ea843f8af5c1ac8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-klentik60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867a7171e8d85ba1484ccbd9fedbb11538004450e642bb606b86babf0a5405fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd0cfb36f63a87f6eeab41d83ea297e4b55d42ae0c9143d25d201b0d316e288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-keraktelor15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bf5ce96cd6c11ba3fb891e21549a849531894a327bf31d94dad4fabb8b0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4604a1826d54b7bc541e0631babd48b1612336836bf404c83038ddc5ba0e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132371 Malicious code in candra-kue98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620a4e4b86a0538193d08940acdf3c867e0f27fa543be47424a33085a3de9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-miebogor46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a07d33f67e83499432a5b20734a2bec5d136d841127adcf5e933911ea2c26e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...