Malicious code in forever-andromeda-sadr-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c25d29d91f79f19cbf57e67c5c4e2b0a700835050ceb880fa502657636e89fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139276 Malicious code in aldebaran-fetch-node-sass-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2879d3def66a72ef1d6909f23252125f3bc1b2ded6df7f86f4856c3ce31a567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141354 Malicious code in csv-pulsar-hexo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7aa4dbfbc4d37f3551bab23b708a86c043fba750ff0f018e4c7625657c948c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149263 Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142155 Malicious code in eridanus-shelljs-oberon-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136442 Malicious code in putri-sambalado13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf438f9e0063c45a71fd3e5aa5441f03ce98258e49bfb4b894507b43b819ca42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134077 Malicious code in hanafi-lodeh26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2113c05541b4268dcb623f5eaa203282870dc911a4dbf8689c8e921923819c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137308 Malicious code in tiara-ongol-ongol98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2edda9a38ee938f8a9f044354874d6ccef98ec8599525a1df00993a4ac69ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0f1c77132d140ef04a6401db3a4fbfb1751fe2c853ef5a93d3439e312b7e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-rujak12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2676d3f3e5749247e467b1685d06663dddd6091d1d043ea3880912c7c337f401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ketoprak77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8c9fcbea6adc8a2cbdc4ea25af51dbe8f7463b8ec36b910716f3200cb34953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-rendang37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23439cac14bef586faea48897d2f59f27d4171e877ae3130ba8f7a11dd9ff9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kue32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3ec8b60031cce8ce336cc5e95d9948e6d5690be14713574f63816934187c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112792 Malicious code in bambang-rendang58-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8592621f06ceabfc60b29fee77a9bf8ebb592ac14f33654ad01be69f122a3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115195 Malicious code in kresna-gorengan99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f240cbb664230f261a16c12e4772f06b9cec179dc7d84a7d25f6d3db8a7147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jrxtzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ff7ec04b5b5bfd2f8d5c6ebd45786d509cca97ae3eb00f5eb94274867b9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99085 Malicious code in accessible_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5800925ccac1682c2542dd29fd16038854c9d40a9443e8c7381db36ff212d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108577 Malicious code in sexual_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2c8842bd56d5e692004ae4238b2dd91f0c5ad532cc6fcf9c0baf450cc3e7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lodeh72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd20d5940a456d8bac9531728e7b001788c0c0b174680dd0cdf1097ec2453a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong26-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af29d845c6597d7ffc97c7d72064ace7c76e7ecd246ae088c7c94fd9d9bd37fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...