Malicious code in archaeometry-rollup-plugin-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dcfdaa9a4222852d826a3e0212b6a3584a79729124a8ff9ee1178222bb3de18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in book-web-deploy-object-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e707ee8e6a7b157de7f049f46c37a2f9de5d01555279c9b19fe13e51bff46327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185459 Malicious code in antares-airbnb-cryonics-ionosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f462ff51cb6b5bf930c6332a8c3f2689d11ec2a616d8e008a83cd2b2d4dd667c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181092 Malicious code in teate-thy-sonic-werduw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9eaf25423193252f213ace05a1e99366ce435ba30ed93b6bb4e5a6430faec1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177192 Malicious code in nuyar-mar-aiforxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a681e4cea9796131cada6e589b59326de1533d373aa1328de6f98d8d99e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172845 Malicious code in anak-jalanan-mdn35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ab5e7d9a954a44c0631332d06605ac55f67cc8a3c4aea26150834f48b592b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albio-tolanban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912b972232ae107fcd9acdc2540103e2ee7f18344ae69588ea9976d5fc0d57b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157536 Malicious code in kentung-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc7dfdf7f6a8a52e0a0208e753327df2803bcbdbd8f767456e5b4dfbb96c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-publish-dynamo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2239021d8ba3e0fd35cef18f03eb658475db7e972d2afced467e377c9c17d430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-mieaceh75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b85f7f079cd0890c75eb1690c8c3ecb17bde307ea7032d07bd3ae3183433b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136087 Malicious code in oktafian-getas11-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d59833144ce7f8a689c3e8f47d13de6bb2c7757ba1c3192ba7751e288cea4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478f85a33db1e0c2647e43935914a7d856611463719ec5e720524e85125bb5f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-telurtahu3-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f9402fd242e1e3294a8d70a8299c2feadc9ab092217f4be9acb4213ff64bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-martabak58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8a98c5d0b3d38d610e1a7c7f72c06ceb54da2bc8e298103d4c9d33b870bd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b6212b84c854a1073e76aa1b3ba39bd3f29075f72e6c79ed3eaafafe9663fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91769 Malicious code in vida-bakso84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959ba65af21fcb1cab85c00626c113500ccfbc93bb31ff11ee8e03de84bfb9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c1f1ceeb911ed2adf279660b69550a7d5f6a484b7df3155cb5060f840745dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kembang49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e389a99569583ccc27b09ea4dc363479c851727d71424f8d3ce86b20d591bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69907 Malicious code in pleasant-amethyst-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6e95ad8b1dfc09738ad6cf1f0e09fd14a0e9f8e242655bbdca1de6dbe80638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...