Malicious code in xanthus-express-prettier-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3469381f893205a4b4ef707f791d019e2f28b71355022db771346399290b307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-react-bootstrap-dependencies-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b353beecfdeb4819086c6f961d70183613dc65b776ff461dbf29613f8ab84a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-semantic-ui-farout-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70468bbc99ee37949bf80e5206f0f716f5e6c1e218fad639b36f4c6509f7f251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sadr-stream-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340278f68496efeadd003e04f84c930a752735bb8c48821c11ab92fb0fb0c98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144585 Malicious code in luna-toml-bunyan-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02fe946e206d502c4d09eed806309f7229c9b311914a265613e10f8166142950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-meissa-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d8a7b6e669481fa904e09e533347207b654c2c73dafbc0f436908439741150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139701 Malicious code in aurora-luna-ophiuchus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7529c8b52158312b60e08e1fc053d2008b88292b60a340f064f9c5321f2c53c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147661 Malicious code in sass-loader-callback-oauth-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212c3f3b0e02fdf86f047a32b47e085f6d54d34e5a3f94920acf5f2c829da336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143205 Malicious code in heka-express-axios-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147716 Malicious code in scorpius-shelljs-jekyll-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206761eea86e0acc5e9e66bb149cf3e1e19395ab125b5a7270552f20ea581f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in santuyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be22e0228ececf4b955da10274b9cf713201fa8044783db3b90cbcf2930e8643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138814 Malicious code in international-copper-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916ae4b0421509f4ca33a2a4902c5e06743b2fc8024e87e93e03c921007496fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-mieaceh41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90e7662b61d7320875cb8ae238e172989decf4da318cd42fc2c9d506502e9b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0749335b9b7b5ecbce412e51e3221f8f58658bcee87981f3e6d2cfa6b5f472f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a568763097ecd99e6af6f66d237fb5c4882dc22c2bd6c76a12cb66f2fec89000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ruwet34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83896fb3c10ba416d79f777d8ca4b061edcd82ced0211d6954db1f4a632ff758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137092 Malicious code in straight_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bfc4d0187dab76b9e4363c9ca1e4243c39bb722c945d944888dc8374e49478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134345 Malicious code in independent_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5018bbf80eb096cb085213a656c9ed8ae8869c73db54bfda377fe8e254a645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135494 Malicious code in massive_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc14cee5cae72985ac7566f23c84a71478e0f6e2c74700b1bd7b71e1ef09b309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...