Malicious code in nokire-zabuza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902319a3bf7446f2af4317d717d199a320ef5d186dd40858be812a18924d28b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca41a7cd696622feb6071529ed1074a5d7e842aa64aaf12226214a6650587b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151260 Malicious code in abiba-avbai-abunahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007546fe82f32c3ed3b08594c587b9ecf8f4440796daa00838ef2efa91f1e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167928 Malicious code in teagood-yakuna67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c407757910bf8dd2c4bba6b704183f37a6567802505e0a0cd5d85f9021e525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153446 Malicious code in avminh-afogofafafi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaec3665038b1a794a5c5320d0885467c8528f72e178e580d67cc8e1c41de24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168881 Malicious code in technical-alnbio-tolanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623f8c0545884b091c4203159bfa1525a620b27cff6b778bf4b7fcb0819f1f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159757 Malicious code in mansida-nomfmadi-munnau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f412dd82e6e46dbaeda2a36868610271d20cbdc9d594af760c6888a4d3eab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162716 Malicious code in nokire-kore29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7498c2049146dc0841650aa7ec80f2366d960ee8a2d39a650939ce1b970b8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-winston-yakutsk-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe636acbc97a299d869084bd0513317bc3bda86908730e32ac2ac31c50b13256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-foundation-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3b80862080168727e51f66b36697ffc73536a3113103e04eae783caf4cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-relay-soap-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af375c1cc7e3d5daa24087f91e3a575c2cc62fd208b8c08caabf86453888112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-algol-barnard-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afc1ddf515223da7330acabea06fc8b87301c4dea1c65047835d6e0e233f33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-mongodb-elara-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dacee0b3a1644a413676b09faabee48fa2c7fe4cf97c5d529b7d48e2e12965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-magellan-cosmiconfig-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894871c32dec81809809ea575078f376ee66a5c707755a567776c6915122c4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-oberon-private-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f3f2cb0806cf61edd320aa4c7424aed2cec173f00e9f069a575bdce405dad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4aba2baee216127b0c025e606eb26aeea734c1225a518563943331c359874f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-spinner-dagda-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-google-websockets-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6048757c791315828cf6fd6fc888bf6104dd0e50d276b6185244daea12ef11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...