Malicious code in express-buffer-quasar-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57194e111538f98b9fa0a9a4608e20901da6e8c1d0755d9b65444908296ba03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compress-water-cluster-slow-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562f9b245b30c1699990c7a16e89d8683682dfec4887a6054b862b4e36fb2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186816 Malicious code in eris-jekyll-cryovolcano-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c6bf9654f4c623ec797e540eb954ccadb84659308a9899c1c079e94f206506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189697 Malicious code in string-eslint-antd-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09b41ae985cda899d985058606ef63413008d232b4ee9a9dcdea6bedafeaac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-async-karma-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac58492e423291f353f279ee514a101ef97ad2023b70a908cb71091c4390539f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-dabbamikumiak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc69f9a615f06a1736629eff2fc029002b3eb2a54e46cbc06ac8f471c33db0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-afibanaihid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9666e7817b22e999c75fd14cee12ff6a6db574b0e461fbce5ae8a2f181a2a817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacedcuadoaepav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687be00d2db79608fa31eae731e45b5e0335d018fcb877fa1ed487b526479a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unise-kit-bograttipda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8992c24471b013c309218af3a24dda0509345d27707497ca3d7302c37e89045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliadsdsgsgnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc8e481f6b8b0934f1c677b2c9d50dd6fbcf5de84911f64064397d45b62531e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avig-ijimamfatugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6d79d9221da7612144e290522b547efc377d47a15f9c16cfed01bc51efeaa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184760 Malicious code in one-kiat-ibuarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1ae965aa32fd400d9c1232f241b08a8f8b444feae42b8f4872c9961542de5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182510 Malicious code in imodiov-omfi-cafacevavisvoetfamolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3353460c96e810a71e89fecb705699e7f7f068ba3f41a504885e6c35a444d358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184975 Malicious code in sonic-kg-tifuacffacfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed88920420a3610cb980be501d90deb726b03c8e29bdedab64a062ea3adc7d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181878 Malicious code in avangs-olium-noti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde0f92653f32a9665859f81366c641dabd589620cd3746f09ca6e43856dbf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-gisoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5448eb67c5645daed2f5a2c6e989b0e0e589ffb5ab266125560e77419bd5175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asta-alikif-dakilam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95fadb778c69a62261edab22d317781495743f67a37080052b636108b466ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitoko-ontcmi-lapiokasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e56f083d7d097f8b3fcabfb8bcd140e401bb7bf34eea8c0278483fa63fdd8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-itaniabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf6242aa9188c361d39bd7a11c9e8069c652de8bc25e3c6244f867263e4915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182216 Malicious code in gociy-ng-ugufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83947443d80ea08d8744813bfbeb4ed665a5b9369739b4d21b72a918ff31f9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...