MAL-2025-186415 Malicious code in css-loader-iota-celeste-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a6b13fa0fe3ce78be3d5056c24ebef487000d78e816da9cf71322e731db798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-sirius-changelog-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99724af34264220df5ccb753c1103bd7ff76b4df241a798532e0790d5505f7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-rocket-bioinformatics-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b951132b96da10142462ea444c50d30aef2965745f67f0b123c553520f7c232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182425 Malicious code in imodiov-kufni-acumnacffgteafsgrdcadfavfhafebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0542a2ff20ca86b3c21ac7c8aabf587fe9b37b0309173d9c03798ddad3ec032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184066 Malicious code in mitouko-on-lakoikaunoaak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c145dfdb09f14feebd54df4f9bbf7e9251f56c76440082ab953cbc790fe93b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98293514596e25c9b00bfcfa30a6eec983213cc6ef3bc29c81b76388e87a1ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afaoti-uufyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469c8de69c567ea9032573925528223347b002f7300d5a23777468ab59e85aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9524129293a3e4be2f9fc2996fde68b3a9c44cd081d99dc4d426165c17bb01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8084099cef506937c5e9d3511caaca023bfc949630af4a21c0c58b1b485586b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139358 Malicious code in altair-playwright-webpack-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff48dcf02a3092ea74936fd4d768da0bd9ac52d2f1244f4a15fb194cc208d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-elektra-fetch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144866 Malicious code in mensa-titan-nightwatch-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b6d950e304689bf927b0eb107245cfff9ac1d358670ce648179c179b09d090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-moci17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf82f44aa8cac555447ca55a0287cd5367552583229d2a43c4f282556cfccd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138563 Malicious code in zul-rojak89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581dfbecb8be68a2a598efc86266316f2eb7ae639c63419f52927da7cac83760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gepuk21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53aa76cda196b46f50c016fb2425da46278c795c0cc2334da918696dbd3f014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bbcd18db4c944bbac16547e87e85525048336cb243cbda62423ae7df16c8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gorengan97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68365cb5682762187ecd72a28d03e797a8c25ca50d231afde14032ec1e9c2a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130214 Malicious code in siska-kue27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe088ea9babadcf8e5a93dea9596ae01333629e502ffa3eabde06702997983cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-sate42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a59c41cb1adff8328f6d1415fae4a856708ef98e6dc4223d0cff89d700d710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d2ebc03804f7d796411f3694ff50d55d2e84941267a7fcba4a0586f271db8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...