Malicious code in aril-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd9d1e0265cb119e2ac42ce065ff974863d35b84fdb1d766a6660468b2a6ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-doigoaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacd89e89e6a4839c034e5e86114f0cb80f42b52683cb830073f49990a98e426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150141 Malicious code in @mipta1/mikas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9731ecbf09392f434ca9a57efae9b07bd6704746b58dfbc2987d47e4d585d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151328 Malicious code in abih-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709a3276b86ec7c781427dfad43c1eef89eafed335aa8366ecda3cf336db5015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiganguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dad3023ce9f15c05e58eae07605108376df6147cc0aa3edbf2fabc4cf89317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168895 Malicious code in technical-alobiko-taovlanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053f641b2bc8bbf5d38b49803ad5718aa8c6a5a05f998a2a848bf24c3284418c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165190 Malicious code in riyanto-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95a0d769dba7e1aa10f82beb0eeaefe9b0ac77da1c7ce09cdff799350428798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167470 Malicious code in teagood-nalikami68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6411f5f189b89210b40685345d39ca6f6a8d8032ae5b258ae4c38fd02ed3fa5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97239d53b7085e8f75790a43f3003c002e0b999e0ab9960c86a3333a7182a29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156292 Malicious code in ilop-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d6d253741987c6ce03735fa226dc07885df2f7d3ea534f51957a4c1a9a4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161786 Malicious code in namae-nadua-maavwr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02503797781102d77ee474a8d77bb623e017dc5c2fc7f74d2ae69e725695a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156008 Malicious code in icha-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf34996fad6689e528ed366289df80066952bc5e0c7be2820443016c2275ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-virgo-impulse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f7baa439a7ef55154ee9b9254ab2728fa7346ccf937a84ab806d616b5b3e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-pulsar-odin-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5e10a1e80dbe898a0eedbdd73f7c13bbd6e948693740434284cc0d8da36917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-hyperion-fornax-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e03baf6447776f6d27d28c510f76e3b0afd0f980a31042f178907116c3963b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-stop-terser-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51be2fc585f72ac5e1c652ece518c196302ce3e5048abec0a7233a0cdc0b4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-markdown-hapi-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4e9bc0187b1ff61b66ba57ddd7a30ce8d3ad9e0fee1b75f97b22b698a286c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-cassini-mutation-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401128304cdbf7c072836cf82f8fee13b009ff8a7e027f96937fde57663b0d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140564 Malicious code in ceres-eridanus-eslint-config-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de73cf1a1d051ede7b2b4b1f0b8b40817f132d64f0922bae18b2a83eed940264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...