MAL-2025-144523 Malicious code in loglevel-xenos-child-process-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89afd7046dc02e65e205937635f26c7474c3f5c9ba7e19863cb1fcd4455e0cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148569 Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a458dc1ac56e93a769b5ee12b7dfce2a272d1d772247ce5792ae25d97b27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148436 Malicious code in sync-wasat-deimos-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b928c8b1e23b0ca5a42a3df176fa0f9a12482797e409ce6bc09d1a8c0636ca86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138648 Malicious code in defeated-lavender-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9281ba5d27e75ea0a077a2a1957518f8fd3cdcee4945eab4b5ccbb558a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-apricot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313adfe19a1739710ac40ad1d8d6f8cbbc5926b0f0885edbf374379c5f5cfd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138890 Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-bronze-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6305424298dc1af505d2e06c3436f83d47e73b4f623105f2821fc44243a3f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138593 Malicious code in basic-green-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27433f0fa6bf15c5f4060e5f50fb47748d2d2ccdf05579f278a8b6f6d3accb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138738 Malicious code in frightened-green-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db59ba617bf579bbd2a0245f9e1b6ced1df533af2895fd80c5a6138c9976bbdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139020 Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138819 Malicious code in juicy-peach-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8495dff273ff30f3fa8cd2f522328a0f34648c9c7b27f7eeeca8109788b0d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138681 Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138664 Malicious code in dominant-plum-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae52cfb25a9af9c388c4e718280853f0a3261a39fb8fcac1de8ae77f8340cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-soto8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b32cb008dddff5dc668d212ce339b52c28cc4202c654f3985597d6786eeaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-miemee63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b9fe3143e7283638248bf1212eb9868a99e17f1a0870b9f5c49c0ce85e1b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ikan1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a8cd669a4f7d4a158f3261347bdc8538f20df964b17e8781e37138336117d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tiwul29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cbfc51ce5eded70bdf564e056701ffddc24358123f0a2814fddc1d42e57b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ed558fb6767d86600489e53fbb7c1da8e4492fd320e164e099f5f219ec9e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gado-gado22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792da712d1e80c8b4a305ce1d995f82b2cd66c8bd5e0e8c8fe30bb1d5aac1a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...