Malicious code in rinto-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5769e8c3629454a792ac66d6f396ef3909e71711bb90dc0ab101949b6c04d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150017 Malicious code in @mipta1/ewraujfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69406cec47c89a89dd43b845dfda07b4c8b375934c053eefff5a0e8890d20ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169590 Malicious code in uarfug-miu-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6398c8f15ef465ce28d8feeb2c247f49a4075c04ee2cc00ece056bf54f2a1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162089 Malicious code in nokiragne-asaifhafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6006cbfb59c0425b6ffbf5c4b2ee78cf5f2a1bd7607584dc50a3d39122d3b507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164822 Malicious code in rinto-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757db8779b7df46b5dee0bf597bad409f3b5423fb4993bf0b7fe46d436f7a226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-module-node-sass-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb6f9246b4340ea2d5b3f4d1f7e17c9848520a29053562bd88b04d07b97aa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-kinetic-leda-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50e61fd0f8a954efe8419f09851f40c614971a38e052be8080419ec4775c845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-apollo-ganymede-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe44379e5b6375b7b9e7205ae5e582c5214177af83c03cc6b4596fa80f3226ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-alphard-sirius-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c805155bc8b2e40df017e26f58e664de20bad1b1e5ff36ae71477544f82c9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-aquarius-nodejs-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f67fb71a3747d55826f4467a6d22ba0c7a48f45bd691fa8a323662c2c86b26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144124 Malicious code in kastra-nebula-markdown-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab07ccf257e2bc8fb5c614300e4c4e456be899800ab9971efec8702b1c11cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146464 Malicious code in prettier-dagda-repository-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe057c006669f901ff3deb8a2322a85cfa4150b203802604340759d1d0e7a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140340 Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1da336dd77cd89cb44218e89717c86254a1d963cb305acf62f650a1d7b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139768 Malicious code in avior-equinox-xanadu-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76eea4af93d35fb757d64bc6a0908d1992ec9f0e3137d15eb9846f8f33a18dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149891 Malicious code in zephyr-nightwatch-eridanus-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696d7c4d5b4385fef4a7e6589e7493e1486988935c857bb2a6a4f54bc2e5828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142532 Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-norma-lyra-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9e34bcf1e3c5b6e4923008129abe4146826a6a6147d34d768d2ea843dd9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...