Malicious code in test-meissa-stream-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e201ad4797f6c1d0adc706095b06d260333b5a1677e61717564549f492ee379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186199 Malicious code in cold-hot-beta-log-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a7f8a4e041fa30770c77c28ed0ed77e8a0b512d546aac9d12dff4a25c02072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186772 Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb6d3787cd8e826342e1a35672bcd802bf1f5e183672c196cde0b5b219fdc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187147 Malicious code in genomics-outercore-mongoose-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9599af6ad25dd61bdaaada8e8915ddc13209f52f00cd009dee659067e46b311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-inuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc0a4a32082b9bbcd779fe505d685506c57839244bb683c4c60c0943622525b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in savion-goodmin-mix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291519c98b9c19daf53c25d08409e3a3f43fc53fe0cb8f05c6a59624d6d9b1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174940 Malicious code in inul-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa702424ed65d4a2d1c17bd0363e9cadea29b2a30fa42ea1d8edfbcfc0bf0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179248 Malicious code in tray-uozp-pustr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cbdf7e34bcdd42c233a3c22568ae4c8b20fd8fb8dd2ddac197225a33c4de42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fanafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5b2c657cb1f4a0b279807bbef0428e83e21534667d7ac4d3bd763ee15722f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayua-tufadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b34bef72c22ed8cadbb1651ec2040ce150303c9211514ecc4687b801f697c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimalaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335560da350540d5efe005c43fc28c850bf22742df0878d947a56d57c6a271d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170001 Malicious code in uinsu-loti-babinakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e960807fea277da8f6bcf8231202e3321cc1c004bb345d6a55cba426b7b91bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155424 Malicious code in guras-nutra-dagads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3f6e3cc04241d81725379a8a3baa07448404d2a91a8e90f4eb98a65c5ae5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155413 Malicious code in guras-nitroac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5532b973a3984d8fc589677dfb23fcb59c2a34182a491f9a604c4e7202c48654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-kalian-bauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3120e7fba89c715c3f12d3f9e10ac0ba9a4fbb41a8723dfe8864bc5cbfc063c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c074c8e732ba18967f68d39e237d810977fef96de1eedbdee749dfef1bc19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-resolvers-jwt-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c175874bc0b58a6c800289edc50a2a6c585a7146bf9f39355407804118a5dbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-karma-rocket-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526c1876e6ca917c406bd85bd5f010372f899172a5af0441719f3554760a9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140884 Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146060 Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0855a6cdfae8e1670a3485cc01494e3bbcf29db65d753f2584e2bb3c06e422b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...