Malicious code in pino-jwt-spawn-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9482fd8c422e0686a472436bd8fe8e417f9f1d3974b41d159021dfc6f1a2546a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-proxima-yaml-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab40b667df69aafddc22f108f2d07a25f78edad369a93fe46cb65cacb2f989a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144418 Malicious code in link-ora-loglevel-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81750155f6317d515808884158c0219879bb3a01bfd1e4f522848f357c7a422e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146585 Malicious code in procyon-css-minimizer-webpack-plugin-testcafe-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3434db300a24a4a310c9f954e2c6519a8e6b015daeb915d719dbc60554f3710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138960 Malicious code in querulous-tomato-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4576a5b87a9b1b10ca144423586d36a7b826df4efe3835bfc69499d18f9034d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138672 Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-tomat33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b82a96206dd7002af8c4da019eee98af3895dbf755b9ba340e9d05ec78bf245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-tahutek79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09060a140c2ea9223759bc04727bccfdf3afc736ba31d76343cf7438d33ec27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc27191c5b251d889bf8c0a82780a1378f78faf5cbb93efc9622b6d2e30875c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-miebogor43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d80ba81d4464293ca74c54233924f3abf2f5ee4ca067838df1d6def0188d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-mieaceh98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9608f960e5c40a8f95ce3d031b0406bf0d1739e9012cb8316a4eb1f82c0ab38a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-mie92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5402bb1850ad035012d91773d93b33d6eb5aa840150489c958933b75a0257582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-keripik86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62e05a2b1498223f2bb3e024eace98004639cf88514b280359979e5c1f5ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136667 Malicious code in rifqi-serabi38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a420796af4d65fdb961a0586ce2c7672a485f11804f59cd3f5d402121aad474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132574 Malicious code in cold_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42b6da5a8c8df97813ac3aae50db5780d2821cc5efa10f0cb5e32c4af79dd62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-taiwan13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea8f8448221f5b1820f00301dfea19daabc43aadba64ed8c310fa49bf5456c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135787 Malicious code in nina-dradag98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295331a6f98dc2e9e468572efe0d6707acb5d083627e67ab0acddc3484301b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135055 Malicious code in laila-brongkos28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ccf2b93c87cfada09615fdfaca8c537dc7f2cbdc5d52e325d1e05cd9b20aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kolak22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b14e758fd5a9dc3c4b2c9a94542ad6c085e370a97dbfc8f239cdbf0b1ccb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-klanting49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f7e0b89f28a14a57bf121ea135c95f3ef65d7f6959f66422935a4a11171436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...