MAL-2025-188811 Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodai-sunabi-cufanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1e1a948699bdc7ba2ee6a6b0605edfb655b5433ca946aed709366c50cd5668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151025 Malicious code in @miptaa02/welad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fb54076bdea7cc3e46e2be895cdf902ebbc6aea6349846bd2c6e8c464fb59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ecm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb311c62b29bfd7d209a0c04282cb48f72d0931fb5ea02c22bf322ec1cbc3876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assad-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c611cd04169cc3549558e62966a166620d2f9dd38960a77cae1336969cdb680c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189a6edca0fd1741f908a7dcb2913db131cc30ecba2bb635d1a29d7995948469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-update-umbra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04b62248932ce1eb3bd7057c3cd0e5b5b2cff794acda4db4a8f091129b1cafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140082 Malicious code in bootes-iota-sagitta-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b591b6fecf503c9168c2bfa57bb3c5d06274f8c76955b313a261d043f484f65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137501 Malicious code in udin-tahu68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a21f363e5dc7a48fd4f5e35171e76603459eb0c0d1ac41ea7d04926ce591aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129489 Malicious code in putra-nasi8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3639d1546d99c1826c4696c70b9adc695c8641f7d1ef1b7e62e1b4ffe985ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116809 Malicious code in rifqi-tiwul5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7940919b680cf9f941a0bc9875181ff3a9858b866ba3fb923320ceff55de7a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-papeda94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc5d9319ea834ef8a041da2aa3af483a0a88802420e7e243677495c711b4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_swift_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367de7aa63692347973ee4041f9855a2afb945029461c2938fd82823dc44fe1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98160 Malicious code in nadia-rangi3-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47404d5108b5794bac4b5a1ab564dfeadf4e66ff3b72a2692f7aae55b9bb9693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96628 Malicious code in slippery_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586f1e976b186ed9944865b28ecb90643dfda1d9f9441159d02171c65c38303c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87143 Malicious code in joko-rangi20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2877719162fde1ef2ad05fdc5b180ca306c679237a8fd273e25ee0ce9515f839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92948 Malicious code in zestful_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3ee1bc23d7c504fc1e477defca2bb2fc945937aa9ed949985d090a7df41e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88398 Malicious code in maya-tahu30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa18c22668dcae8996f93db945bcdca742411d91baac12624b90af76c608c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kripik69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7645190d5b321aa5d73a20801bd5c593f41ccc59fa1851031d548c5f194ae708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73872 Malicious code in kiki-mie97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de11a997a9352cb966b36dc688d89ad4d5c4c1577a085ef2c6cebaa39a857bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...