MAL-2026-4508 Malicious code in cdk-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa41acb776dbedfe93c37899783a5e54b78017ac31576c798a27eae6b9e9ec89 The package contains code in dist/entry.js and dist/index.js that invokes npm publish programmatically combined with writeFileSync operations — the...

Malicious code in kapvino-socvnvi-bofafnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb44980d843215317f4d26b1f2328b9f284f756f14deb604eaa210d1dcba54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fd0beda889f6c2d11f2000538c4e4e750c554612a884873c557de0cafee81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160396 Malicious code in messi-urt-efdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c455cfdf4bfed4d6bb8e674b73b85cebeb37cc6551b147b5d4363ccf036fda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143049 Malicious code in gridsome-orbit-sqlite-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7457bfc70c4639c65ec616e7e6c19be1ebf923ae82efd9a748be1d226a51b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143995 Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c1914fb248efd5238e86553ad01dcc8e761e3df13dc3ba91bea0927460f079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-pecel52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7189875459abc547909d99b588122ce22fb1918e1cfa77902e443246f73ee10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132186 Malicious code in bambang-sate9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19940c86d09630a8797aea692eda7ffbad8127104a155673c097ca45055483c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134456 Malicious code in iwan-dodol37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7f8f4aa5908a420422581ad5efc67f2cc3de81ff07a0069ca3b3e5664df798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-mieayam28-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca61baf740765ca852942dc6faeb1c416f1deb6d99176057d8e5715d2cc2167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110800 Malicious code in weird_weasel_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f515f4d6e4f6089419613b02375fb3ad110466ff85a0b6796123918d01e718ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106568 Malicious code in ogi-getuk39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4128a7e47152140b177b5642ee7163b01740fd2b6c7e312c6eb1d045e5dbc375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94724 Malicious code in gothic_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2215ccffa0d497ef9e7ed704ca70ff55a7f7427ca01a228d5824dbf9007aece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-moccasin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f6accd6026252175134c0f62b084e3b62f12924f7763063592b649c59823c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70192 Malicious code in raspy-coffee-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474096b32aa3c1aedeea59447b0e1b3919008eef97e74dfd4815e30e5e594f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61836 Malicious code in agus-sate86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c36751f81783d79a4d684bc60b0e769abe86543489ed869de6df14de38b6c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58378 Malicious code in riana-brongkos8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6aafa096839bd2d004f5e54758d005c707411645564f19fa8000ffa674a2b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-lepet36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1d561c5396d950905b4b384949f4c441da360af2b5f8a7d3bf063d0c81e6db The package tania-lepet36-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-50924 Malicious code in bambang-takokak21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adf6b6c830e2bb934d9660ec219b81de12c144a9d6edebe2643a29bf56ec8dd The package bambang-takokak21-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...