Malicious code in umbriel-kastra-gacrux-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffda8e7d30b433120052954bc506ed481cdcf30599bf0120496c17a88789f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awk-sun-deploy-key-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269eb7a813c15992670144ef18f9ce3cea7e0df757009a82a2b25dff93f3dd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189897 Malicious code in testcafe-markdownlint-antares-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb416541db246687e8679b0e1dbca3a372426705710771e12da27b8eab1200a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0927784b04550f7b46d557e1801dedb4768e9daf49d4070550dbb4d966511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokoik-oni-oladiaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef9f9f5b262c4492f47da84c3f870db66f9a4db7a9537dab9b6be88fd2ca333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183949 Malicious code in mitali-don-oliksima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d143737a294dd27bad8cb7779a6788e941c8e753a4138d2b71efddd6c0f2d235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181924 Malicious code in flight-iltag-zilauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b656d74e1d3869227cd57afd89e2feb5e5721280b2e652b6e816b915b6b0d682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185175 Malicious code in sonic-oig-tmoaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a0dcc8ec12dd4329702c494e32b54c6d94421362325cdc23e97419b06bd48a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184005 Malicious code in mitok-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c6a932a6bca451cbb1d8ddb44368b8446e1e5eb4124dd9f6d7a453beefa7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8002834ffb5b2a795e730681a6f3acf6b237f10b301970add5c54d833d41ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac2a638312065fe6a5edcefe6b7a9b183e6cd858a4bdd20770a1f4ed746ae55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1589c775b2354d8d3929cdc5e1ad3ef21232defe0c75bc1f69fbee8455e9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-nuytisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb1f9df98263bbaf6e2e73e8e4bbbaf1c1ea01d341f3285af458c5115aa3a869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177773 Malicious code in polymer-ahia-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c64821d83536d5122b4ce9a321da7bb0b80ade96679d5a530b0f49f9c31d7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-guld (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b869bcfb1c0f1f4546a805fcc30ff5ffdba389863b62df13371e5f33eadb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42d70b2e15c01851177fb992e577c80cad783954ec0a937f01e0bb2b7e153aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9154cdc9d769e59b957e9975a02a68ce06e3b2302d6df66f4049b43dfdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168025 Malicious code in teagood-yakuza65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df89c4619131ebd96bac85e1d807b1e64314f6407dd112a7d8d1c66396ce2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169952 Malicious code in uinsu-lost-dulaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3437fa5f56c97256478b07ad4a8860682ea3da1125ff06ed7791a3322c4694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153233 Malicious code in avminah-fagnias-iofagigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebf8d91a006dcbd536acba2bdddde69cd50728fd5112126d3ec6614701d1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...