Malicious code in sadr-passport-mantle-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbf90790b787c745d7ecc3df9a5bb266126009d229135095e2d81322087b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in refactor-cron-yaml-dog-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f532d2d4f57507c28111c51745f643d112b717e2ed9a9d87626b13df78600416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-webdriverio-lynx-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbb715d4acf64ade15a47fd3c5a01c86a6a1ba2777dc7bb8b003d084a247a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-wezen-bootes-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af838a5409ad46c803f49911e5142c4505a584392775561fc0e5b1eb266f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-kiunu-bio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6001d5188697a7284d132cf72c2c321df8feb7ebcc7db18b06571fa87d026bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184270 Malicious code in modiov-khan-avcafivaivuvagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955ca1801c8ac5b7aa33c3cf1cb37f6426721a5650a691244eb35f23ddf73277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-tuiga-alukaumabvza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c49fac2cb916ad81a7c51f0922afd20e44899ed9a0d815639ad2fd3f2198b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181269 Malicious code in @akunsansan0/jorelat20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5cf221e5ab404a79313777e94c9b077307e2be0a62e793e86fe2ab35c9703d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0afui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae2dc075a8c6ce2a8004aa1d98c576dd52b8d97b197950ec2dcf8cb9d7cb6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180971 Malicious code in teate-thy-sonic-toco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29ca6cd3da0eadd7c7446059e211acce29ce4ac4aefc32bd3a2b7e5d4fe99a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-lopic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9e776a81fce6d24010036270f6c3f722442fec8c9c1073b5fb65cbb388226e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179523 Malicious code in anais-papmoa-0pimaoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c29a0b2c614eec09d1597ba30461e1ee6ba488460ec30f8362ec91169698796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-init-tesas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7234d4995ba75f1a5aed970bf54883653fa83934fa7262102376d3235de4e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461040528feb7929f516670438a4ec83959bced0e61fc285d9028a3189a43cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afriiiiiii-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf65810d017ba413913c2cc1a006c144f451d9a179271fcc6264d83c75773fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175471 Malicious code in keke-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25531baa36e37160c4039ef75cbcf137bbff882c53c3521bd38a0433432c959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lost-daunaiku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806a57dc4d40d4efc60c156eb9893a3fccdef2fc1ba521926ad69bcff027ea64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayua-tufaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e507f1a2f1f20429069d72dea4d12fd9ad5b85f474ae4f10553a9e3caadb110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofagoagi-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1930d7e3a0054fa514eda5f35b6073fcd64f8d48d7938c7bd7b142b9ac04627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9baca84631b912e299aae51b20af06205a4dd1c03b831828596b9f6b398bba96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...