Malicious code in modirai-igno-jinanaguhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7795bd304a33e8885a7bfe5b04c06bc253a648f5f240cd286d0131a249879fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de90a7e4b0aa306f036dde913f93ff092e6f01c2375a6e65121f0b2a0059bca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe-auagasita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20675ff85c14eee27f23ac16716e744d137ef3de4cb1a75ff5649626b2be54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159471 Malicious code in manadsi-soaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a676f3b37c4461c639c4abae721336a9bfcfb1f524ceb6896cd61aa6d95b5204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153787 Malicious code in bintang-tea38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72a3d16312f1baba98602441e2c08359ffb1393cd6485540450da639b70a6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163660 Malicious code in nudalea-fofiari-agomi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b79ddccebf628aa517032eb2420ce52f383682d928cea66e2e4b9ab48069aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-xerxes-postcss-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc34032f91ad101ff579e2d9baf7bb1b8c4b5ed7dd11e110b66f1c2a838d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-thuban-lacerta-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c26066cdf7ca11aec8c88de6d30f536721e786cffa0b9f924a5dffbff5bfc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-redis-stop-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65e1430ff5f3905e4cbe0ad81e4243e56ae4777ae305b05edf937249950fc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-scripts-leda-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab0ee40b5f0054f0f245c73295e76c8cba5d51b98bf5c7313397217d638b3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148476 Malicious code in taurus-phenomic-forever-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e64be3ffd5563216dd100283bd77ee03edb1abf07974d1854daf010e063e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-less-loader-miranda-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ed1973c4d5e23397b4caa724b6fa55067f94cee4cce94893b426544617ffa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-tailwindcss-dynamo-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0c39532693cc4e6a18279726a197b967b08a795b72a474e2b2678b46a3f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-writable-grus-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc35fc95967e6792a523b2b50ca9116565941ee17151c3a44088bee86775c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-chariklo-oberon-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e097682e36630b237386c15288de031a936baf46e72c3942302e068560fcf01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139285 Malicious code in aldebaran-query-slidev-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cfed5132e8d320f4fb2fb99af73bb8777c499543b18594cfcbf201b4625eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141658 Malicious code in docusaurus-cressida-vuetify-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d307e1b33fa1f7f77aae72aa9f324c6b1a79457a5786e8ff424ea0338bf9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139032 Malicious code in spotless-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77cdb69ac24717d9ff3525f4f532b4a27f5ea34961c3ea1c4ff57d9ac22fbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-pecel16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e727dc0bce301d0549dd4e1138f73705bfba169c4dad7fc6489b160d85f72d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...