Malicious code in resolvers-auth0-version-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4e728e0527b6001c2f08d20b3cfd6a79fcd5d20e77ca00cd55be6186710444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbriel-zenobia-sedna-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b10880c1028577aca2324bcb02cb17d6dcafcf9da7aade9173f0cd6991bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-comet-flare-robotics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4fa443fc219b32a649b7258c7128b38d90c7010b81b9625f2459c8b43d2a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in execute-long-pipe-file-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5dfe837fd34a8b4469ab59da1615cecd539ec907a7092c2d0566fadd5cef083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-local-mongoose-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b872afd1ac291d4ad9a6557070b1a111c63c386c84d16d9637c174bb6e04f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in web-route-final-nu-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5c7be5f1d5e20af05a8a41845cf88aa11d49fe80adadaa957e21395a29b1a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-schema-release-it-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e806b764b2423062a8953ab5a69c4836580fe7b128531cebe88d4b643a30555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-ganymede-backend-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4711152c4083ccdb19747bdc390909e2dd6d6c64e5f7d82894ecc60e1fad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-exec-adonis-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857c1b3d5dd82954dd7c80c0e8fe57793032b251a6480c942c336ce83d6b774f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in singularity-bunyan-eslint-config-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2283510842946d2aa3d0b25e8270ce1e0e52b912769d3adadb85a58493c5e67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in star-route-query-export-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20beac557c34a749310f87e0f1b74f8044729c51c474177886ce1fc005f2d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186572 Malicious code in development-antares-xerxes-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4362fc9df795b9d7cd12a02041fd8a23c9956574057cd907b59e60ecca9a9ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggmatondngnru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca4e7fbbf6185840977142b8fd561afcb824661e9061b942c3e58dbcb2e2dc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182097 Malicious code in gocay-guga-visagoihi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0047ebad62628afc662020c2244ad4bf5b402a62000defcebc9ee0f2aab59a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kian-avumangaffgiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9899afeccf3745b88ce3c62b14f3e715dac655f9dbe194af22ae839e0809c980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182292 Malicious code in imodiov-kfi-cuauscdigbl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c98f646f349b6885b051f7de35050defeba7a3813b55a245f419a3c421426e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80218d43debe038bae4e822a495618aa2fb4ffe67d4c10ed73fdf29524ae6521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183001 Malicious code in itale-dci-rfrtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65044a716cb24028f7ee25e91a9bd49960270a8f009ca9a2601fd0e35906a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-digokiuasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc3bf05f8b50186b3e3638a3f34b2c359d3b4aff6d477d8096c68c10c1df84a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef408d2e90f68bbeac7d3aa26be4c7cda8dd1f14c5045711d147046f245fe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...