MAL-2025-144689 Malicious code in markdown-pdf-dactyl-ini-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0224b06c2bc01bac122fd5a5ce40190a7a89a36d255ff938537c7373ca12a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146316 Malicious code in pm2-xerxes-luna-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144737 Malicious code in materialize-css-loader-install-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13edd62a1c3d497a562a02de2b3cc6d3576b08b3540dc41d920894af98afd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142596 Malicious code in fork-run-script-json-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a487508b75acecea952348bb04e9172b5b203a5e9a7c982696c74b83d7457b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142716 Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-package-karma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eed95e027be6b3d93e60a805a8b140da2fefc31d366385a1db9dce3da622d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-winston-jovian-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5ccd23e9b09ce25258d0121da16e8571c37e336c93fd86210692a951a107288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-eridanus-dynamo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04984e267193cc3d939a9ae85ec1f22e219b8dacd45b35cee3053f79a7d63619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-html-webpack-plugin-version-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84509b5d35b1df7faaa56be4c99f921048932e5586fbdebf4d72f7c87eb39467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-beige-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd489b8842177359fa3eb3daa060d55a112be54d2da42794f741e9bce7ab1457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138587 Malicious code in amateur-pink-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0074ca7da84079367f873009592e2d0463a76bfc1601b654276cde150ac537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138894 Malicious code in net-salmon-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8637a889054a27d0cc482fc3fd9e5d4d6630328fb24a5ec669a7994033f221b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139065 Malicious code in technical-rose-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79756f833eb7b85846ecd66b15a72b2513b4a28a53a3e54df116a02efbeb293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich-ivory-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962daf46b363032432dc2cb1157ec479478716cd4c2e0a266d362de454941a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loose-tan-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83426f6d8857b3e3e9fddffd79b800060ededb0ff10bd0a40fa8869a6a454aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal-jade-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77fd24d5d04814d0339e97be48906769d7751a0cd15f4eef9bac8dbc69c672c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahutek52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13166a5eede1b1e9de9846aaf496393870b05b9d500821ab7190ade5887ad58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-toge69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126325568621ef4146397895ca73ff61d7dc511b5165527bce2adafe4448ecf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da3464836d0f08edb69269558834a8a1e33e1c8a645053d9c79ca8770e02bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe20cf18566c9af92eb8db7d501d5f861b033309d4ee0f6f4a6073563f8de1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...