Malicious code in enceladus-eslint-config-readable-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1fc764b9f62908de5e4c0fab8df232ef0a5c42597b41238b24ebeb00866fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184916 Malicious code in sonic-kaos-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559092d56327e9045b8eb59d7f82622d9d3a9006bd29c77147efd79ae27253e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuaucdocagl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17d552b55f57fb5eb2aa64d43d813ee1af4b8292ca848d158e1a3911b10848ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172761 Malicious code in alvino-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b8f1a304538542acf706cf5342ac7a604001ffae78a2a67474c4df1ee970d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159257 Malicious code in makani-aiavamoba-iaaiufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd289c7deb8686748b79e759bb7de2f6802420dbc41e34a01fcf7c465465273d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157723 Malicious code in kuinsu-lubki-nasiami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2126653dffc14bea3635281b165c2a03d5e3d558e3e7f7929217f973b6a157a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157573 Malicious code in keyla-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643459bf27e7f18dc591cab526c718b5d0c62ae2cc75339aefa3320a4071d973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150858 Malicious code in @miptaa02/niaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bae1610b2cb688b3f689a14b05c552bd43412e056a5f43e9595dfb6af021db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139745 Malicious code in auth0-europa-weywot-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84449bd96a5112c0e2b1d90775d6c79d8c3ae116dadf5caa01e15f9903bdd3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142666 Malicious code in foundation-antares-yaml-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c13361cd8d538077dc2c193291919f1787c6e62fcb69632c5431036d2d5186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142280 Malicious code in europa-mira-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c23a78a815cdcdc0f318e8ec01bf642638a7543a0d29202b96f07209df1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-gudeg39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d48e6cdce606f7caab75f531986ea98c1a927a68bfd35d25f8ef66f76a4869e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132724 Malicious code in dewanto-nasi74-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fa350bcafd661c12b864dbe0c48073f6b998d1fbbd460eebf8cdfe639795a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118124 Malicious code in xaver-bubur47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bba140500f5d39be3ddc1772ff253c484c2c750b1f6f99e15f05127238105c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-semur72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ab8bdce9640105117413568a2426984b6dca7c7e21fd844e304245dd2ad191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114775 Malicious code in indah-nasi73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642debda64c21d5d55d7a5e8bb7a771e6b123e43769e10063d5ea4cf1d5a054a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112438 Malicious code in uptight_iguana_salmon-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a2d9c78c70117bc9d642e926fb4504c6a860ea28a8049482950c7cf01fbf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young_pelican-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6a7c35cc637c13cdb2ba2caef8cdbc21c5e35a329d0ecdd36f17adbdc76863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0750122d6e3500929751c8317f0b6c30001095fe7e0ce5e7e6f784c789737498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105734 Malicious code in mean_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6d1a12adc681e21e8d64145c80b643f0b65b9c8f15954ad0e20fe1adcbbcb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...