MAL-2025-147503 Malicious code in rollup-mui-canopus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da036f3d7323a4315db349f89af20737016fc10490dfc341a138c1357c5b785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144749 Malicious code in materialize-polaris-gatsby-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b887a5fc89ada71a9d049c24c19e61cd6becd23fbfd0974d2bb116ffb64734d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-meissa-config-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bf6f8a6ac69fb91ea2deb9bae6b5c130a16569a091709ebaa8a834a03f251b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-cluster-duplex-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf68f6b5a3c1515ddb9baf8daf27c3cab617523afea0af8495b163e358be257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147649 Malicious code in sails-javascript-nodejs-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a17304e2a6bbff648b6d32463f834700b906ce3fe91ce25015d40c032aba0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143130 Malicious code in halley-auth-vega-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-miranda-element-ui-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478640b4176788ec26ab2af3eaf3a84218eefd1aacee687df057a7012d20be8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139679 Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147619 Malicious code in sagitta-soap-jabbah-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce1eac91ce5b3dd1ba6b6ad4dc0e56d557a5b7264db95f7ee63c57767b13c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138755 Malicious code in glorious-pink-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca66cba7a49e0510546cf9b5ea945ee6b4d7739adb038423cc8b23b1e01c981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gepuk21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53aa76cda196b46f50c016fb2425da46278c795c0cc2334da918696dbd3f014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-bika41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977b8686d9bf03f9851e887c0da80984da5738f82537f680bf1438b2fc31cf21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da549713d03eab9df6073e664a77f3477501b4a959f2f85890eed6855510149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135450 Malicious code in maman-mendut87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588c7419b41efd584b2e7cc0c9a6a29938008610126ecdc681b7863cfdd9aece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132406 Malicious code in chief_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffd666fbdea95afb6452b5ca220daef1be153c946b9919478b8739c3c1190c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135590 Malicious code in motionless_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2a727ee0464e551d77198f24d8e18e445359386ac13789eb2d0ceb401f66f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-jus1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba40afb30df01a933c1275ee70fb3c2378290aed4732e85ab0cd310560f1345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-menjes41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7c947ac5ba25a38bb702369ed41261c67bdaf92e841b5dd8ddc3a8cdbffc25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-empal4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91525addfda8f1fd840ecb5031342c3bba614aa2166bc658c6373afafc86e8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134545 Malicious code in jaja-lapis30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990e113a255940951d0e365cd9757ad4b56953c232c806cfc03a1840a9909208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...