MAL-2026-6716 Malicious code in test-pkg-pnpm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5df84cbdf3092d5f7b8f405248144eacdf5119c756c97726974e547810ebec On npm install, the package's postinstall script node demo-clean.js auto-executes two installer-side actions without consent. First, openDemo...

MAL-2026-4508 Malicious code in cdk-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa41acb776dbedfe93c37899783a5e54b78017ac31576c798a27eae6b9e9ec89 The package contains code in dist/entry.js and dist/index.js that invokes npm publish programmatically combined with writeFileSync operations — the...

MAL-2025-186864 Malicious code in europa-alphard-docusaurus-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd12c80aa354e4a81290deca797d5a0670d28e73a14c4d60a450ca24efb9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb44980d843215317f4d26b1f2328b9f284f756f14deb604eaa210d1dcba54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171220 Malicious code in fikrisatria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab503b04ac7b66afa34741e8f33cf9763230d44fc76e20da5cf10633adf83d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fd0beda889f6c2d11f2000538c4e4e750c554612a884873c557de0cafee81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160396 Malicious code in messi-urt-efdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c455cfdf4bfed4d6bb8e674b73b85cebeb37cc6551b147b5d4363ccf036fda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143995 Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c1914fb248efd5238e86553ad01dcc8e761e3df13dc3ba91bea0927460f079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143049 Malicious code in gridsome-orbit-sqlite-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7457bfc70c4639c65ec616e7e6c19be1ebf923ae82efd9a748be1d226a51b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132186 Malicious code in bambang-sate9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19940c86d09630a8797aea692eda7ffbad8127104a155673c097ca45055483c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137792 Malicious code in vida-sroto99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056c2e08d39928b7482400de943aa78a33515241da5e4f21da49c8a373917d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-pecel52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7189875459abc547909d99b588122ce22fb1918e1cfa77902e443246f73ee10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134456 Malicious code in iwan-dodol37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7f8f4aa5908a420422581ad5efc67f2cc3de81ff07a0069ca3b3e5664df798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-mieayam28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca61baf740765ca852942dc6faeb1c416f1deb6d99176057d8e5715d2cc2167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-taiwan36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f8df1f67295d202e1636a57b5a0a1df0412ddd58b23b1300f2492871aa9ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_aardwolf_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a0d323cd359178c6ba12e28874d7be3d446878954505f1a0ae8b8c48f0db7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110800 Malicious code in weird_weasel_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f515f4d6e4f6089419613b02375fb3ad110466ff85a0b6796123918d01e718ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106568 Malicious code in ogi-getuk39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4128a7e47152140b177b5642ee7163b01740fd2b6c7e312c6eb1d045e5dbc375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf1170e6a82c6669653aefc04de05dc9336ffc061cf8a3f53d0e948d7c01fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94724 Malicious code in gothic_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2215ccffa0d497ef9e7ed704ca70ff55a7f7427ca01a228d5824dbf9007aece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...