MAL-2025-139375 Malicious code in andromeda-csrf-got-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b156646e5ae6831d28447dfb85a6d23732f46c59aebb936a8622ec2da9d24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141979 Malicious code in element-ui-prettier-css-loader-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9dda515544b35b86895b297fc0976b11b17da09edfed790be05a518080f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140359 Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-optimize-css-assets-webpack-plugin-graphql-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff01dc55623537b68abbf03d914cc855fc9b0ae244eab70204a734b075f8da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-ophiuchus-hyperion-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391e658c8a08a9667776016b9b6caa23975d58346ee82c0e81f3025358eb9a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-antares-metalsmith-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138846 Malicious code in loose-tan-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83426f6d8857b3e3e9fddffd79b800060ededb0ff10bd0a40fa8869a6a454aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a06e01d159fe96f8218eb8826369d87bd448dc9f4b2e424716a78a706aaa003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1110953a9b63710ebfa04d35da9ca4b0c0b526c8dc7ee7c2fb074bb56a670ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bbf51f298231489bede6b09e24eadcc5adbab5f67afc1789b00a3a5dbb1b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-mendoan42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d282346a277545cab17bc5943188167e696b4121f303626bda01c3bf2437337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-klipo93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10874191e4d150da01b05cfbb1a2234fb4db6c6648fabdd623c86475cbd927a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136692 Malicious code in rina-dradag30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1908001adac17f72b4bf588f37f4e2ffc31f7821acfa35b6554b8f835d22982c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134907 Malicious code in kresna-sate78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e91db82375fe3c0c23d4da16a75ee511ada7e02bf7105208c9f5854a5cae9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136748 Malicious code in rough_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327f61be4bd41fc1c0937a1f624fde98202d2bb25e8cd469db00c4e19588d183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137036 Malicious code in skinny_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f8137a8f4bb45fb51ab1d0e9341bb030103c70ac6f1f7a88ed9010fe2ca84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-mangut74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbee9071c91461815d59605fc15cd309d63b2654bc55d4ecd32b5bc531c7cca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-dradag82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def676e1820aa4350dacecdbfd0ba80a9cf10777815f976f9a7a553cfa7e71e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7081ebf9b0dcbfdb68be60007083e186d778120c22bb0e8af627951283dc739c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4eb6da557f2533e584cf3406734135b7ee0b73b48fa934d9e469ddee596cf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...