Malicious code in cloud-water-old-moon-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190236 Malicious code in wasat-rimraf-csrf-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0490c6db59d2c6dab3d93320b54f7a2d60b74ba0415f01b8fa68bcd25ddd3587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183183 Malicious code in kidt-avog-u (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a0c4b70f30432aee1f167454174cfd8b776581addd06401f8aa0e438ad545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185047 Malicious code in sonic-kots-fudvitifyaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811eb04f5c296af8d0775c0287aa1c35e7a9ac2bc0940df219cd502dfa0aefbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaya-s-sdesaasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bd046a579cf5d289e104ecc82e834bfd8e6cc8f721c76a72d0a3e59437647c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-memekl-poldoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3c64b968e0c67f79c2c4872a266392763474a0be6f9f9ace97ad6ee65e6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518723a17edd37f4c39a468744f3fc2d3f088d814ee94622aa63619343d73b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafru-tut-dutut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b560abc1b0192c1919823383240f34bca07cde3b2f025b858f6abc524dab89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/savia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93aa5d7b53e8036b3c9873ebd5d67bc73b94f178247ce70b08d3b2c2d6c711fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165330 Malicious code in sabua-muhay-nyabutua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69b4d5a905c7e34e312daba9e21571080542c9e0532fd2af1679561461ecefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158694 Malicious code in lookingan-namakita79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8f601a16cb4600da21c9275d7551369286957580ca1e449fc928947d943336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145728 Malicious code in oauth-eclipse-rest-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9d7ca9340d6fb8b3f88a34d84bbbbcee43c40fe37d53bf84d90cd34b2a31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140220 Malicious code in bulma-mysql-polaris-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642e49e59bbbe4ac10f5aa70b2452a7dbfe7d5a9928016d8a8fe291fbf43801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140496 Malicious code in castor-spinner-async-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7ffb45dc2db3ff1f356c7e393e67f1de1d339af5165815c7bc65a9702f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-pulsar-google-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6c861bd6e9c076a17982609b8089b529c3b1811d9a9c3830b0c0b2bd92d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134776 Malicious code in keen_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37337fac3c8c4b728b01df4ab731befc974a7a91de859b443901184502b8919e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kue76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9130f1667cb960cf1dc9c089ce0d794933886c54ab7e45c5cc0ec475b317a5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-soto84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156dce36ac52de3ebb4aa6b85340d99e88f5c69d36d8d51bc89841bd1b986a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b890de9d50af4f89a8aade14a4e9bc38e183b977485dfabd4281c1c72d3d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128684 Malicious code in mulyono-bakwan4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184633c8ea3ca56e89e1dcc2dc6d2b61588973b5a8aefb419569cb1e83b7e139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...