Malicious code in icha-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4bc3491c8f5ea1f5b4d70d11c7c5f08532fcd0d83d8053d3e5c209964bed3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165282 Malicious code in ruji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add836ee41845fcaa3aab963631f2597e7cc07cb968bd6fcf694ee45d3cdf6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d3f0079a6e1686a41dbbee009ca673482ae82c2dfa3ebad2ae3bcec1ff5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46036a44fc9ea14541a7e6ee28161307646cc6e3db41e92d2705ae20a4bf6d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865d04b4b677a6a39047ee5cec1e542211b9ab6259297797c3bf104703289ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd81ca33434c5bff2194adc8030d8f3c094791a6fe4ed9ed246555eed73fa201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153233 Malicious code in avminah-fagnias-iofagigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebf8d91a006dcbd536acba2bdddde69cd50728fd5112126d3ec6614701d1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobali-janu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b294f95320b5110f75047876573bcb3c4666558bff81337010ae0e11428c935b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/nsd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311020e506373adc9d2b7257ecbd134bf22789f540cb3800ac283e83654505c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395d61c5693975779df44414092116715e65f9772751ffddc83074808b6d17f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162588 Malicious code in nokire-genji94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527dc95072bb3c537a8c867bfaa2807101bb7e35270a6677e92d07ceb121c525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165711 Malicious code in samehada-hzhos-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e567542d3f12736caced153f646d84c80d1e58e93cf50f8f4c1bef5c4647718e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vuma-nuagifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b6e26dcffedbbc3fcf930be88b3e6a1e740e71fd4d80c79f4ce1c92d18036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-scripts-koa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8bd7851dd59a18465c76cea03c8ddae5cbf1b88a7a03c3e87200dc9451156a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-kronos-warp-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46463893d487d5780c5b22490344844b9a5e96f1b8502d896a2839501e0e8b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-prompts-xenos-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee820c35d475c176e55f15d2ab1c6e6291ac53809a568f4ce77a90c5700fd41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-janus-socketio-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e00c3b387e0d4c24f5c5bbfa1bb719d4839b704ca295d7767ad124b27dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-element-ui-sqlite-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e5be9b47f6694968a9eac77b11714a83793a8bb7e1fe43a9dea6c317f0e651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...