Malicious code in jurss-gdasa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5496f9917ef3e90cab70b4b2a7f742915a11f0a714121d562c3346dadd4fccb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f61d59af7b14e802bdfd6d34d56279bfa4fe093a86b5bb9927a4f8a9ffdd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1e15b7e9a5802cc83a8c27623601a6e1d65f941c5c7e63598a3a45f98a79c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8733a2f0138fcb0150689f10a6fa2ff265566083e050ee7e7e2f03a12d0d556d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163325 Malicious code in nokire-rara37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55da5ffa5249f67f35bbf9d4ccf67ebc0bbd14bae3197994780de15161d71320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153605 Malicious code in azhar-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fccae25d42ba7cda3721d22b830d474bb1b2e1fa72909971cf8c9ac26c54431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156076 Malicious code in icha-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9047f69afb543b3f7d03de80db790532db9cbfd1ca1009d43c2d42261f4fe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-aldebaran-link-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647259965138fb26678eae545bcdca97f5a7c43870a0ebce868f5a65afd8b371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-changelog-fomalhaut-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c35c542e9752b2646b451d0005227ef866b25937c4e8fadf117e531e46f067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147494 Malicious code in rollup-ceres-nashira-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c4e65abf401015d4d4213a7c0ab52a1a20d055907783400b40e9a89447b753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139173 Malicious code in acamar-dagda-koa-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ca820a2561e3af6c3516d615cf56b1e30662bed8bbd8fd6d0ea9752e2b338c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147114 Malicious code in redis-rehype-ursa-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bdd382eb1e539450124dd835e0c6ec1041569faf9e48d98e50bcae43941623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-polaris-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909b3a7f01141b9fbacc667aaf91d800373fbdfde86330fea106757063bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-husky-meissa-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e0ad3e15e523571fffe4dde2372141a4ebde58c26b4302b395220c7bd8915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-winston-xenos-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b65e57c7104e9d7b684f7a4c5f402c844575c8a57bd91d2dd386d718e0ff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-fork-redis-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7330231bd4ca11a5cda133e886e1e711021f7dc403545ca5b0527970ceeb58b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148826 Malicious code in triton-radiant-lynx-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7121cea280f69ec28b05823531126fbded5800410379d2b89f4942fd981ba2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...