Malicious code in tectonophysics-farout-cordelia-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf5bcf2afab2b331136836c91d71ee1f886593553e406a307a1708222d4af10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190139 Malicious code in venus-nextjs-heka-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce32a190eba19f5be21cabd7b1722d51a5f1046b2d93dd087e5957927c771cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188269 Malicious code in nextjs-shelljs-centaurus-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55363b3a5905f100f53657d0b726caa73dfb097b64c18ebd0409751dc343854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-nodejs-hugo-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd615312860e6e2a3a4cc57cf701c017fa4ecd15d5001d0580f63e6e71e942e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186841 Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844532ffb61dedf116bb671dd0cb7a8e6ee68b4d6e7b7a3137265a273e7fca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avumanaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db629712d0c323f05362f626b330c7e855c18ced48ad453b34063bb77aeab07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182335 Malicious code in imodiov-kofi-cuic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcfea0a4c0f8a5861e494bc6d94770fca281600d82d8faf70168c595be84ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-inuuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e50f36b27d5ff3059229506d9341344a9907b0c46e702ed4e2c304e9c40020e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-mubana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8248c05c4e2065670ab84204b8e2ffb15d0547a90eaed8938a9d5a68d30446da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abehhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae85fd0c1e0547c23d771e514bc05b228a4a03a551f842bc850501ae77d1bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174924 Malicious code in inul-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20daa5f3adb1d6c165ad3098ea6f0144b7e9b6c99867b8212feb1e5de0be4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174561 Malicious code in haritono-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9bfa6dab4dda6d005504aeb4376521adb6d4286f4040bc59c09aceb04f4ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeba19459dfa0b9ada52fa4acabb7bd0a3268c5c3ae1a45830fb93b79118329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-nudanif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7d5b2995f29a0c367a9fbf04549dae95cf2f24d22e07b72c4954bb9b63aecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178195 Malicious code in rindaman-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b6ea4f31428a239d994a36d95b7a90fa0a45ea0c8d2374cdbe366e450f7345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c245b66c9a8cecb0e2fb7b5add1a91ad13fad0d5544d014c3809ba5915611a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171393 Malicious code in jacobroberts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41cb54366dc2b468607b623305eae36cf31d6618e07f097ba13d892eae2cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofity-gaoni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57da65aefd9d98d16716355ed415f9b55936f1706f5a483e41a4f45856ca3b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163419 Malicious code in nokire-sekiya30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63651315633df79734a0aaa19ad6aba138fbed61b87bb1b89a70314b62e8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d411b7734697e88f9f01fc8572d0d18510985bc304e3d43857a3701f8f5dd189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...