Malicious code in ilang-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8442cea6bcf0204ca37f0558a07718ac8fed90d8800261cbf2df2af699ddd722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151973 Malicious code in aibopuna-mobiple-amra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad741c9f9899bd75cb9b330ee1ea670c7b8f31a081a1ca5fb14a1fc9583be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156892 Malicious code in irashi-2aaa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa50785786d7a9ac75dce36411e59e2242c372de38ff9cfb8eda7336bf42654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169074 Malicious code in tehasddnah-muaido-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fa77600c15d993f8a8271834186cf29314b383cd678c4a9868100a718b3d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165550 Malicious code in sabuoaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc64ab1950d93a41ac83cb8dc8b650019b05ff82484984bd9a702163c9888c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc25a8d2bc71c022320fe65f581877fd2d55fd2ce4d67bd444d5637b7d2010c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudashai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d993bec8674f897197b8d776b05d780e6ce5e74b16024fac6b06f55328d17d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/erigo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28880183fb4f3ff36567828d2d3a75b16d720ad3a436fd7338e5fe8a67a1e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsd-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2c932e4632f0a3c042ee8c06416badfc3bb7f80403f3aca6192592d04a88770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wfaadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb3f940ce7d2ed4683a78409a15e38ceaad5f6a6d11cc3d4e330bcbf8a0b6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kmifsaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954a4ff45eed6c3bafe29ae401cd99fea3063e0edd4224d03bf7cfc4ce36672f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163779 Malicious code in nudela-gagaghagafafh0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d456fc98c08c26e35c5e15fe52da0c2be090471478804c5e9e143610b2a8d409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155870 Malicious code in ibanuni-otai-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1853c44ac8e62f3face7d54f9988f60c55df04626284af232987e20d5a925ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-cordelia-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5408d4585ed37f98fcf6fb078ab382491ab854e3e69db0c57fcc3be607c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148120 Malicious code in spectron-nextjs-element-ui-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0061303e422dc557f76edb02ddf4add87660df7d1e7b5c1ba2c1410f24e5d69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-typeorm-zenobia-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175557d4a655d5cef955077dc02c69a555f4eb2aa05bf6aab5889a1e6289ccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...