Malicious code in rigel-levels-taurus-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa91034c8b8b7eaefcabb701f38524d7daf0f7c5118a46df8eb3ede6cf5e30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186332 Malicious code in cosmiconfig-xml-rehype-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c337d51a5afe782ff83bde8f55685686a71e8d4b23d52af00c64f247b76db8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180435 Malicious code in teate-thy-sonic-gohgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75bc7f506fe045b87ea7f9441e2dd9edfdddafcff8e699c2f93a8f7093d625e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177185 Malicious code in nuyar-mar-afadaff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8743d2c6b223af3c0118c5c289e558714a44a2f4a1950780a51ceb5fc55895cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-massag-snuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55efb08d029e45169d0ed1a10b0dd20639a49f9010d56a886b6c0e198032d539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175342 Malicious code in kapvino-sogdai-odgafaagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bedf8b34d1ad833e101ecaf75cee864a37580a554d91fd6fc45fa46cbf7f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172008 Malicious code in xingyun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84985c5fdf63f6bc49e7207ae212073814d80c79fc3c7591f1fdb010ade5480a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167934 Malicious code in teagood-yakuna72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03a40a47098c8ffdd398ed861c5cefb60c37a55bba9d8bc8fc9cb0772942ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168312 Malicious code in tealove-darknest8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020e30938e147eb818b15b19b86eafb7b12a80ba38c3d67b670882a51efd530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cara-bsunssns-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56d47883e30052be89fa5680ae70bf24f896c70745d772cd215e6e345c0409d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162570 Malicious code in nokire-genji78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272b60fe69b1646768dc9983e73323c7a2940d3240f57d59904f20e09bf8f4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-rehype-norma-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd213bdc423b2ab5c22eace93f80c095bf7484f442dac2efef9cdf02dbaf54ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-spawn-cypress-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae82df6c0904e1d398642292d37195a4b1f7ea5bd2ee48bb238ee102bd3b28ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-meissa-toml-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d78f4ca4fa0376bb75b752a5cc25b42b01e85ca7adf7a6d68e09850b9e8fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144148 Malicious code in kaus-local-readable-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86fb489f78786efa57240e5e6d3f8a0bb5a69761aec4f56d5a4ef7508a605233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148209 Malicious code in spinner-semantic-release-nuxtjs-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa28620704ac1e40b252b62fbe8f07a19da9efed84bbee91a1c72c9e07efe29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140320 Malicious code in callback-vega-ganymede-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba68ef1ecbe1a9f3230f0d417d74740cde111180171008aa80948ac046ba77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88072624d312752e3426013cd3a27107ca90f50d3605141c4c689622c31e3723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-keripik76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c840dc13427acc025c8b9bc163a9ae5fc76c0975594c66847ca703eb7081bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...