Malicious code in abiuba-avimun-abatip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53a3b2229f7de3c2f104c368e3d49097eb0066cfaf88fe8fc0cbdc571239f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magfu-goia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617427eaac6df836ee344b995cb0b8e4363db3e8330383d2830894940c4895cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154480 Malicious code in diago-kulipo-lukafamaahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa931eab5577a90a9a09d7d7452a9f18552e2f1d236dfda31f461deef61f4ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150621 Malicious code in @miptaa02/fgbg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e7921d091aaf71cdbd2b14c5a6f7108b485113795166fdafff8e290d64d45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c074c8e732ba18967f68d39e237d810977fef96de1eedbdee749dfef1bc19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162603 Malicious code in nokire-kilua17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db4ea2fd04e60bffd2385818ff307c777dd5767a34b0be071538a3ab9769adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169276 Malicious code in trevora-cir78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4cdcc88f0b4ed557046d766208542ccccff4182879bd37a011846c7e45ba0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a261826369f9642044996888220ae2d7179445a5ccfd43757b65d99ee4d4b21b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168678 Malicious code in tealove-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274c07fd9e12fd1e06849fe5a20f93753cd1e3e3ec3077b2f08e48eb2f398e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155413 Malicious code in guras-nitroac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5532b973a3984d8fc589677dfb23fcb59c2a34182a491f9a604c4e7202c48654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170001 Malicious code in uinsu-loti-babinakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e960807fea277da8f6bcf8231202e3321cc1c004bb345d6a55cba426b7b91bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155424 Malicious code in guras-nutra-dagads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3f6e3cc04241d81725379a8a3baa07448404d2a91a8e90f4eb98a65c5ae5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-resolvers-jwt-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c175874bc0b58a6c800289edc50a2a6c585a7146bf9f39355407804118a5dbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146060 Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0855a6cdfae8e1670a3485cc01494e3bbcf29db65d753f2584e2bb3c06e422b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-karma-rocket-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526c1876e6ca917c406bd85bd5f010372f899172a5af0441719f3554760a9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140884 Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different-lime-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cf9ad724984eddbd64d87261920b7961cf78946c0bfd844b748147829f831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-soto46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eaae0480c4c18888aebe98ffc66639e93bfc6096856e688450980834758ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-klanting4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f5dd006d8508094afb5e4fa2c48b819ef88fcd427405511fab3855508089fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-sate48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ec82f1e35860705273d5fb6856c01cc1848d9b8ab7b51edefab5bd072d8c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...