Malicious code in muny-boph-sadasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d674dfd7bcaedc879301666a7bb2c2795b44162d9c371b363faf46e070e5173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6985ec93b5eb7dfb79cd55acc366fac623a4d6db147851384fd65fda0239451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamoi-liumakakoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230ea71c3c1d595ac9ccef996195b1d90c3a2e2a6deefd3a736290cc1a6d5344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150665 Malicious code in @miptaa02/fsak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989f549707e525d508eb036f8ce54bacbea47b8c65bc578d6766ba039f126ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151078 Malicious code in abang-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeba76b3f734b47a24293de1635b3cc45bc0abe766bb6f9823cb9fe0625488ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-postcss-loader-enceladus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b7e1975ba8584db82d63f8d4ed5cfc113066d24a35aac8206fb73a8d4b315c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-aldebaran-nashira-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1575e1db5935e5a93f31d629ad6daf1a3a9220b1bcba15d162499b8e542dfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149801 Malicious code in yaml-polaris-loop-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5dea1ed6a0ab78b929231fb50636b81477ff4ce75ea8c5dbba76e18abfc479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-grus-aether-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7fecdd0737209befcdd40ff14ff189edd26dc44c878a59f4d80c79df2e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142082 Malicious code in envconfig-oberon-pegasus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef64ff1bc722482830eba161032dd8841a2c241cdc58316dee04dd4f0048768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-package-socketio-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f915e092e9aa33d429080d892b1bb8876a6c35d98508cb80f9051d0eb83f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146023 Malicious code in pegasus-cygnus-pegasus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9e9ee80df78974cad76e4487df04300d02ecd7a6330a1aac8cca79884e5842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-dradag44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ce5bfcb9073cf1bbbedfa209582281ce3931fb500c9e6782a00c585d9b26c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-dodol60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4282257beaacb1eb19b7ff5f4995bbbb354cd788ef5079ed4740c08db5376f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ikan1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a8cd669a4f7d4a158f3261347bdc8538f20df964b17e8781e37138336117d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135441 Malicious code in maman-kue68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae3ac614a1a9a3ffc55559e92e6f57525bcdc703543004f07fd26f57715792c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133115 Malicious code in erick-donat26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8e7755e62d20bb38f1c67fe27b05cb53a81a1d88ce1c899d7e3a2ab77e3968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...