Malicious code in fitra-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e86fd22a2bde0c583ebcfecfb78a356056be75588edef964568d1641111cabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf0c0aa41f5484fafa47a6f18d08a0ed603a65709e5b1bd8caf4190aa9f7e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194a8c91a6e6f990050c60729c04d1d9b6eb008c71f9f8e2c1a4a33f642d99a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156066 Malicious code in icha-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5844cbfa2f9b1fb27d1999ad3ca4dd1e71465effa384a842252878dbfc0f9e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155155 Malicious code in fitra-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713c9c20134a272d9ad16ba4150b7c6cef8f2327592427be535ebdcd346385ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151854 Malicious code in aiboa-molipe-amuiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa01abbf72a84f6c364250b710739d8e42ba418648d058593f7bb4868ac61588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158158 Malicious code in lina-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d79889f185e7de36e6977bec498b9dc1d978127a6202baeb04dac34cd99dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165428 Malicious code in sabua-muyafig-budafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3650dc3b0443477c3911e6596152f09953b3035020f508e0787aaea5b3a4274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152634 Malicious code in analusia-akiai-auniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f366717076b4073622a084c056c3fc3a45ee6d0e2aae8b23cbaf51239c35dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168752 Malicious code in tealoveness26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e2db60432426d563f7b18dfdfbccbcd207bf6f22f3dd5a7aec6d3ff97d568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7fa65d7000f250adadcfb6f8710cb082c44bfcc27803299efd6da3a3b492b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamo-alauliaahki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9535acb93268ddb7e5d9e13a1cac9baf2ea73b129343b988693813b19a11107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayca-amilsukamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9cc10c38d97bbc48155e50616efcb3d7618b42c1ee4b69d72c3bc4be822fe47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153731 Malicious code in billa-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f331af433639ff4c22152f3995548ec39dffddb603cb991e859ba4701acd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae29f63ab3edd79a6f27157b2a92d2fd2d219f65bf803de9275b448418c9dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146378 Malicious code in postcss-airbnb-query-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8a326112cffbdc78e4226c40385297d39c2cc350524c8450de4b31660a6a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149073 Malicious code in ursa-sass-loader-orbit-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299b64b0af89711f6ace77bd2eb74ec7ee22b886558ad7c24f690a3b16389dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-chakra-ui-acamar-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe50038a951e8b1692ef49b02cf319688561c524d88b6c8447356cbde583c218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-non-blocking-native-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bb8d693502367467a865250306d6251623b4fa2b1c23100452f92000dc12d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-middleware-non-blocking-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0911c18dba18f41ddc05e9ca6f4eb53d1a1290db69de8d120a48d8b7b16b0d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...