Malicious code in terser-sequelize-oberon-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac1c00d3c960ca9febe5f3d2a666ce6739ffd7071f21f9b258edfa785a39a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187411 Malicious code in hyperion-hermes-version-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15cf735cb22bc6f6c69e8c0af04d9a49053ea95e2438caf22b90dd1226fbc2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159293 Malicious code in manadasi-scidor-nasop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b44ce1c00ffc2e37561f9023a1dc0dbf16a790639b72015974ed4e4296560cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-ukiu-vilkuakmaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d913701a3c2b6a98a233221f4f6eb501a792471cfff19c114e7aad297f922762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-at-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473b60e102e4ed8390c5203015287a8759b5c8ad2d571ddb48d22116e6d74022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130505 Malicious code in tasteless_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d1c7711655af7ee5e0b78e39aea347dde801ed13a0cca0c5689315189e3e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114556 Malicious code in hanafi-semur20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b7075e1ad1b45d4af4e476334bbc3e0dd0cc39f17ad50d406100543af441f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucero-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d31137cfa1202989b6e344eb981ac38b78522b5777a9739e2f87012897fe2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111193 Malicious code in yanti-mendut49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5a9eae61cbd7bcbcb3f2e49131357ef5e807c77fec0844b3c212a5b8472341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93934 Malicious code in decent_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6e1d230d2e7b8bb03cfb0808f4563ab2c440a4aff9844d32b72a008c938015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77795 Malicious code in eka-sambel29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984ec74caff7adab856f15713c34095a486199a37ee4202d67a520034fed7d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-botok15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a72564b6efad4afbcc94bcc3332a26525aa227bdbdd134072addc71a009fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...