Malicious code in apex-dotenv-parse-variables-wezen-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9fd5bae6492801246b032822f7b75cfe47a3a5483a7f98fc995f172a9eb619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140314 Malicious code in callback-run-script-html-webpack-plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145287 Malicious code in native-cz-conventional-changelog-meissa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac21f13b4b7614fa1c9af0606fd1809d609ba57b1a9f0340f11c23f245f30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148039 Malicious code in soap-vega-hydra-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe645bba34b0e4e8d58c3cecb6d63b49c6452156e804d022ec335a18e9eac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-klipo78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16558bc9e0c56512063c24c0ffa9b8935119d0211d4fa1603d0a4372cfb01da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136275 Malicious code in prior_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773bebfc3d8e64c9b6ec51c12fe1fcb965c7c68674eaccb929fc7d60876a0ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125152 Malicious code in bella-bakwan35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7981e0ac92b3d2dd48a1cd84b35ca21c717dcfe4384d903eb25ebbfa2fee85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125586 Malicious code in comprehensive_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ace602ade28eea7cf52e14933e0d68759d764b2e73030bc84b9c97f9471776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127054 Malicious code in hadianto-liwet51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcfe89f55207aa98bec4a9bdede4ab698e9b48184c4ce93b5ceb00e7cb47b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116372 Malicious code in patria-nasisayur56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024d45dc56f806f642821a2067b18900d9e0793eedd7826163fcf0b7501f2873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111363 Malicious code in yummy_bug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93121b66fbf47b369222c33226e040338ef4c4a12e2ecba2d70fc931ee4e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_eel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d19df55344270a19c5a743c5a42df4cf260466794f7cc77bd1b009dbb1bf96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100643 Malicious code in coherent_reindeer_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90246d2c9a2a2566336379e93e4f68044f6cf38a80a5b4f50375928261286a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d677cf9a21bcba8242407c2b163930d35e6c9e32b53c17b4e7d1166818b4ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-tongseng27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be37935f7c5c2890ac28329d8329cacd5aed34547fd5a55eb77cc64b33a3f3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-empal73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e6be0944e0b60fe85a19168fcc6a63d22773fd6bcc17a7dbb2f87b80648e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kue83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21f6a442a677b9e78ab08563cda0bd4293a1c12b0636228ddc693ed94da9705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-jengkol32-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba3053006642b405a9d3fc6c8bcc33bffc4d8ea0f5fa378c417e05c4499df53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-mangut17-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a211f600c06b927f8fc8fc7cdb90864bbe36d4073fbb7492deb430c89fab77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77150 Malicious code in candra-ketoprak48-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cdf5da3a3cacf1706c3064edfba9e3a52493e5ace4f94a127ff841f1c09af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...