Malicious code in signal-authenticate-cluster-await-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9c4b67b3adc6ae2f52304f08d24dafce84d84d9f5fa1ccbc8017c2dc638b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butauahur-asofaui-dspifh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca49950d6ab166ef17b5493cd8497401259a9f1f54f479feb9131f3c19c3ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adamir-iadfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a65425208e37c49e7ca0ceddfc1ed2a5b0c076d842cdac10f77905ddac0164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-nuytisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb1f9df98263bbaf6e2e73e8e4bbbaf1c1ea01d341f3285af458c5115aa3a869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ecee043e6ba500ddfe8f2f016de3fa3684b0e71613d722cafaa772e6ca0753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841391fe9b658f7ff1d1a6fda2cf66188c974d72b14a28d6fb08209120b18e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-amilsuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de64f59452665790a7e72376f3d7e365e24c9512ed0979dd9fcd7ef504146602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156975 Malicious code in jeep-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583e9463a2fb96638c882668a0356d39458d67fc2bd26e7da25eeae3a329c256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151386 Malicious code in abina-amugmi-amamgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63244375ddff4b8e484483462d0084e76175c274d17f298c228a01a0f72844dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-configstore-fornax-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7525e7a35862c20e4b39dbbe250f0d19fa5b731508ee0a7efd7eca820fa61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-janus-dotenv-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008edfb3e2de8aef4c25fb8c4d770de8d3c69bb0d3f4945c1e0c4d20a43e97a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2b8aaee7f9fe3275d75af04e4b41551c3b458a7c59abf6aaf958977f5d449f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-uglify-js-draco-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26869fd77a392ca463df0916b836137bfb66b07bbfff340b495ad7e48b566e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148743 Malicious code in tool-magellan-weywot-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff21943a5c6a762c7322a56b92c42ea054dd9db5fa7875e2395c6ad5b98625c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-saguer63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66dc20964cf2275ecd8280ed4fabb7c81dfe55aab732b48bbd9a5a0403d05e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-nasipecel88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7ef37eab27a50c5259b660ab24d194c9b8882912697cbbf8b580d3062a9e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132687 Malicious code in detailed_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fefe4b686902b2ad936bda67de29bc08276d7fd53e95506d19d6cbf35faf2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-klanting39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f4a18fe9bd85ca4076085bd4ce238b97be8cf6d588a4ad79f45cdd497d33f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126408 Malicious code in fajar-liwet57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5364a8f8088bbaad59d5bee4aa9ca7858a250ff3ed9a64b901a6e10d5f11d67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127589 Malicious code in jaja-kentang90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cff7086234dc973766c362e1c9fb74930a19d777adac6cad98663228d26008e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...