Malicious code in alita-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d1b79002674efd371378dc046f81815f33031d11e4c0781acd414b45a165de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrio-nuyait-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d304e908d95352c4bd02a3710de24cd9568ec963be4fe6f36ba12b43425f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155870 Malicious code in ibanuni-otai-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1853c44ac8e62f3face7d54f9988f60c55df04626284af232987e20d5a925ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudashai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d993bec8674f897197b8d776b05d780e6ce5e74b16024fac6b06f55328d17d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166505 Malicious code in syahlan-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1b6b7d3b15d9736ecdf829744293fa4eb8b187953a5518e62c15e80c60d5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151973 Malicious code in aibopuna-mobiple-amra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad741c9f9899bd75cb9b330ee1ea670c7b8f31a081a1ca5fb14a1fc9583be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-ignono-jaimgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866362308fddd230e259556c67d8368b32802bc63429330fba38d619953d4c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd041615485f818424e5fa7b8c7f484f974bb96cecb11a24ecd7ca9485f0303a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de1ca6916c71351b8324c4143e4ae2667853f8dfaaa584e01c709d9e591b96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160302 Malicious code in messi-buysa-tusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487aa0b56711975b15f16b8382de878917368c377f3ca44239dd73fd14849164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163779 Malicious code in nudela-gagaghagafafh0fhf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d456fc98c08c26e35c5e15fe52da0c2be090471478804c5e9e143610b2a8d409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lista-atumu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e282871f46e9faf52f7ac1241d303ffc40217140f16689c3260b568159be5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-typeorm-zenobia-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175557d4a655d5cef955077dc02c69a555f4eb2aa05bf6aab5889a1e6289ccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148120 Malicious code in spectron-nextjs-element-ui-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0061303e422dc557f76edb02ddf4add87660df7d1e7b5c1ba2c1410f24e5d69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-cordelia-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5408d4585ed37f98fcf6fb078ab382491ab854e3e69db0c57fcc3be607c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...