Malicious code in parwo-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1527c2d2a8f225cabc23d484cbc3c7848f6f272a1c14d8326c929e5f9521ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158460 Malicious code in lookingan-nalako5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e38df0dd4a6d8b7ca743350dcd4259ed4729076364c0cc5a33f3e8f387815d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157817 Malicious code in kuinsu-uki-vilakamnaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aa808858fb4481ab67d0dd1d29acd61ccd5f39bcdc0bf449be455cd08617dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150200 Malicious code in @mipta1/saf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67272413d287ef572b14e89a59ea0951e2b7b0fbb6a6ae278cff477e3a91806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157016 Malicious code in jeep-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3279340592ef8c5bb707e387f801b53cfd16267fa43f57fe5a177deb49e6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152594 Malicious code in anaisila-pafai-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1c93da8022f137e6adda644ef42ea5efce07c3e0bf8fd95ef050196643091f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158293 Malicious code in lookingan-konami33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d8610de311325e028aa1541e0502cb5ac465193722c34bce3894ff51e8c2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166289 Malicious code in sunden-diak-vamiaalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e2b47b9ab6e044f7b676dbd5f157dc1600f9dc27bb1b1acec99e83aa168e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154913 Malicious code in fadila-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67aa7a275dec05a397abf1e6190186c43ca2fcfb7cefdd00872936a1bc4f2781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149734 Malicious code in xml-relay-jupiter-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d6a9cc34ca95f2b1723710465fc3398f80bd0aa4f0419a2f86ed70baae5e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142349 Malicious code in exec-less-commitizen-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99abd01217e56aebbfb133b6b43794511bc65b3e048a0bb58821ba2d7898bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146500 Malicious code in prettier-polaris-avior-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192b3b22373e63e2493a019959c33075e6492d8e743c885cf39b43bda1abca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-yakutsk-xenon-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed36fd92e0443fd9e17ba71160b7289dafc15159ca4cd894ae408cf92e488f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-csrf-cressida-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03b5bb903e9590aaaa21b6b9e954bb7d9b7ff7cd16f69072646e6f56f766945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-passport-hermes-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c627797fec31a2a6dae80006e9cf6132ff2289fa44c5aa6e583594c1c76ba70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-cygnus-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26599798d1f508b4a74bcc9c1d87ad759a3e61e6ede05b60fa179cf208d6651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140150 Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140827 Malicious code in cluster-gemini-jekyll-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5048745286b07cf1af85ce48d381d6c247e7e07dbcb4b62a9ef60a15e18de9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ikan1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a8cd669a4f7d4a158f3261347bdc8538f20df964b17e8781e37138336117d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gorengan95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6aec6dab08eb9b422b3846a3ada6d4ecae69f9833c8b920f8967d8b71a0f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...