MAL-2025-147291 Malicious code in request-css-minimizer-webpack-plugin-resolvers-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c589217cfc86f7c8e3f88b2b6a0e481940efe817e8590641395b29878ff94cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143673 Malicious code in install-cross-env-ultra-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa47a9926aa5a2cd8c02951576f63f7e8c9b89a70c08db2c802d7b38b367d259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149586 Malicious code in xanadu-async-prompts-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5fc19090c0485f4ed4364f6aa000cc1dba19998acc98c7de95fb08cb3b9b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146812 Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139136 Malicious code in embarrassing_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61943374ee28083fa6ec7a427f8625ca5e007b6c069eb21508d20dbe6f2b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted-red-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76490f3e6232a7e0626fdb703b1ff71beb526e993467e889a3401a77831b0db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138596 Malicious code in bored-plum-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3d3322cd659440660ca27b138d537d5f1c9c36537a23fcb259c8eea296c058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139093 Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139060 Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-brengkes19-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb522714dbe543b15872b2de3d6cb4cd2c98cf3a5637b23fc1a344dbcb98ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-gado-gado28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9281ca37ec5fba8f2a8ad7c4f0da73074713534a4bc9f35260805cbce8354ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-oblok39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa9a9bf912095b7a5f458e8d73e3d84f439458dd77143e44bf09ba828736308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137547 Malicious code in umi-lontong7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed11b62d302a5643770366c7d0d594a7ffb428acc23f98e84cba876eb6b72f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2392d3ac5b776247cc8b692fe7cc00257e430ad70977af823a9e6590ba160cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sambel5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b0d9d1d8df148c9c563d1ea47733cafe432f7cf04c4e4a222a7dc2f521bcbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-taiwan94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26ab273c17653ce33cbeef619e755b60008eeb44cee7af8fb66afc3a023b27a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sasag75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd3d626e21cef045014701a8ca3a85d1cba6fe9332affeb3cb41f863c463bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubursumsum79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96fc61ef9447edcd2cf3c544c892f14185c294c461c5274ef446e7c9f4141d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287019efdf7faec1ad2212d388951d2c63c90851fb0c5302bed2b2e88dd2325b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...