Malicious code in azhar-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedad6e94ac091c96cb7f0daa2138b44031222681f318bdedcefbd861b63e939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744284ec4ab91291f6ce9c0aeeac04e5f5ca66102ad635b7c36f2a4f7e68b248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nona-muiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046d9c63fcd190fa35efc9dfa320a3df85ddea07807aa67b40fd7240e289bcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-csrf-sync-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c2f22baa42188e2631d684d1e40fb625c164578e44e42c3f580ecab9fe225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-javascript-achernar-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99885415d1f36f77e1881d4d381b6f8d4fb2e2a0edd684a8de5cb5464fc9ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-despina-apollo-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8378b5877907e04eadc11e82025babd84f62bc8d563fe6c2c0ff3d55c0cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-prompts-node-config-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9728734a942a533c415e6987fd3fa55102d80f96c4b586d9acd545f101f9cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-bootstrap-auth0-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4dc39f57448875b8be8f6d2e20c57fea021b4e88fcacced609ad7670a9dbd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-odin-loopback-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9a886bb982839ebda50269955d0bf11faafd1668c2f4578ee66d69641b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-rocket-nightwatch-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c1a7ce21f97d1a465c17c98b1da1fb0548bcc5ac605c81f2286030ac4390e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-envconfig-auth0-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f7faf91afa0b899372f0025c962cd94361782828e6bb8cefd809cd004e8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144647 Malicious code in magellan-meissa-mini-css-extract-plugin-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2459c79d8b788d5176ad830632ba8bc2008ac20d2c3fcc62555442cb227c787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146473 Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124fae100d834ecd38af354ea48768894dc6d768b217b345c0026ce633a24f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149892 Malicious code in zephyr-npm-farout-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1ada7f740daf4ec82a6105cd6b46ced4f8385c45a41d911c90df80cba58d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-acamar-pino-pretty-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f910abe8927390314d9dd02154054f3ca7651d75fe2efdae6636290baecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-fetch-event-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1ce1e12bcc903510a892579c99f0def360b8da6d761f716adfb0b174868f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-quito-betelgeuse-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da8ce47e39a6fcb94ed9b5ea924b2b60ce702cb02686594e96bcc4d7a7a669b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148519 Malicious code in terser-europa-start-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced4de0ee71fc50e0fe52a7db3d8cbdcfb0c89d08cd2479fc3b58c46de998c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...