Malicious code in umbra-mensa-bunyan-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cd34942a4dfac6c4497a53e8b881b509a19d9a829afbb5b395e04cb5424ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-eleventy-fornax-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7cc30b90911528e01dcb680bc353ff0031fb1471b18f403c2b5f105dc1fda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-dependencies-dotenv-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36ff10f503ecb03d0f7855f87e5eb97cd43f2994534487d509135bd0d559e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-sudo-notify-meta-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a621f4890e260b07bae44ac3d0fe50d6d1706970159cbdf42368fb889fbe1745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in runtime-promise-assert-async-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc1992c047a8d0c1a09bf957a23e5dcf557eeb8778a576e311694f9098eac19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redshift-deimos-neptune-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f964324bd6752b8565f81793c10d0ab91313d89d5665605b85485952a2a4c694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187358 Malicious code in higgs-biosignature-inflation-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6af5f94c074749c796605831b304d3b23f9cd7ecd27b0771334f6c877a95bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189825 Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8ad6a47a997ae581afbb207779a8920a2efac4fcd400cab0db5924bf8227ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4017bd37bed218baf8180f7a8d67a732992a8cdf361cb6042c6545f2bf75c2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185220 Malicious code in sonic-ots-uyaidoagib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e762cd9d8c7694d79e9970d1697694085059e2df3bb8b57c31be5949b37ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183073 Malicious code in item-at-labieaoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9704de0d0f13ef4305b9c08c6b6ad4589a330405c7c8b29f2fbf1c5e05cf336f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kulig-tgacv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05eaceeff54a24474b1ac0b324b1cdb70c2444eba0a31af22329648b3af0c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181625 Malicious code in astam-ifst-diakav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e72723fd60f6fe8c9b657414bb697e95f4c8bb06fc64acde808f82e1462272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca45b312a3df905e4255e13fa493405d6cbe6bcb0a5b9927d1c42baf3d23dd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-gohe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36c23de302b7d59d8644559f0b53f58f5ba0abc495521fceaf2a4dfc73fa386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179695 Malicious code in kisut-faig-afib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576671a7712ea9780b4a2434c4e8bcbb9f76d9b2a1dc5d1db9ef3a542b0edaeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-vato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211986fff9ecb0384fabc8c53f6fb4735deab5fc53827ba4d4c64e47fb1913de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-fafgap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25527359e75e174257817efe0a3ce6f91137f2dc7d09359a15fe1773361e87c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179530 Malicious code in anais-papmoa-yama02ipaiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a197a9eee9f91a1a50b04236f1b22021edadbf88e3963454286669b8207d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-agik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1548c1938af439c7b1863fe8486e05bf43fa1ccbcab40bd011e746820e2f2d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...