MAL-2025-157088 Malicious code in jimmy-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d30787c3d3baeb67d67a1eef0557b52ede683b96c40be81c05662e284fd4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157493 Malicious code in kentung-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6f4ef8c421992552716f2293adddc9291bce9998aeadfbb9091a9bee34a949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159671 Malicious code in mans-manapa-nud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4ee85b750fa0cf2da26914c6b4271d6f410fc1a7c458c1a01cdfdb9c73feaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-hercules-hydra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d6e4e4353052fa7aabece1ce64d442962f322754056b8fe97872698aa362ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-loopback-cors-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4a31ef0bb41cbcf9f53fde2c2e8f87b92c8c818e43d8d884ff63988175d9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-websockets-apollo-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181d5bf8f8e773b12665333b95e60d88264ca346871341c8131c2f24facc5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148541 Malicious code in terser-ursa-cosmiconfig-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6488da569c06a27b6cc352b7d86c2dd028c9e589293234b9019272e6a3c92805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-loglevel-node-config-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf96d6999bdbe58b3534415e7f4e8060c45e943b0be6ff42b6a86c767f282ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148084 Malicious code in solis-repository-envconfig-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89bf2c00540661d925a3c568b3f07900ba1f4bbff48ba51c779203bc515bb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141379 Malicious code in cygnus-schema-pino-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dadfaf6400f24675483af5af45b3679d0f5854fdf0ffca88edf168e4aea9ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141511 Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148938 Malicious code in umbriel-dactyl-solis-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d249f078620c3c6197c6535f326ca223dbf289a315dbcfcfd8b6a9b44553ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146165 Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-turquoise-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-kue30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41748fe7f239da0aa1ce566a40c795ff71a24821613bf4a7822fb9cfa1cfd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-jus27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f028881965d01f7c4f48078a8311f3a125d3f3384620df92bef251e63ac930ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-jengkol95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8b39d10868f65bd6557be0eeb3044b8c9126e3262b4543aa41bfdb3b2a991f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fc16ec40cb8991eb21c1e8befbeb06bd6d2796c9ff0a9ab20632ff9c7e749a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132774 Malicious code in dewi-mendut79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ecddd36e03c3862e7769d0220b5c66ba102b78c29c9b1ebfbce56c937e3653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136776 Malicious code in rudi-martabak69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3d8c2a3d552dbf50efdfcf2d4eec0f8b175815ae1af73a8f0b054273c6d3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...