Malicious code in alvito-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511cb62763996f20d868328b7ebc9113e13652ad0dfa6cea9852f51dc71d0635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152394 Malicious code in alita-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2183b871f2f9d62ed2e4b15e906231f4405960819aca306b96684c5409bd3574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156480 Malicious code in inal-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41b4a32937d74aeb7f41c6fc1eec985af8c2bd17311ebea29f576710731aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165442 Malicious code in sabua-muyago-dafaaiffuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338d5ac6267413e08fd88c59fcc14b793f31714fe91e1a6bf4f3ea8a34e30c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falaskd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cafb610b1140b26d7b72894d8c16685be458af7f38aee6358bec8a00b81a028b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uyokafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becfc6c85c845b60aeffda9c097bcd03ec82c44a1de6ab0340bfa34acc78c99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-malasiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1c7bb6417c41cbde8f9d3ec78fc412a9c2aed9172367af4de12e3e1ebaca84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78c479f944d610dadfc76efc2f0cde681ca3a92916d253eb9f73dd90299d2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ce1ce142d9f2058ae5ef81c9528c4f20b7bed641e465699b7622c6caf9d51b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-tus-ur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb57d469771f24f3036e0a658366742714705b5bff2f19b1e50850681e73933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c0f61e985191fc0f62927fe53b684ed07a7c9011bc86cf5fb9fdeca0aa2ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163868 Malicious code in nuilava-dakaogfrae-nffhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ee396b6c43c66cb70dcbb55509c31ba3fa49f7391557ae0f59bbdc09b7fae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157311 Malicious code in kamasada-nuatia-veasto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4729f9f50ff2110768b9a38af321476e31967b8b684f3c91ce847117649012e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-procyon-cz-conventional-changelog-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce526585f3291027500d8aecca16e3c975f59e540345c857472d2714f6ec636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-gatsby-zenobia-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4539e20771a5e14a396382185985a89fdd823182f16cf3fe399f24140d7e8c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-commitlint-config-angular-ophiuchus-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3224b81b0368b1a9c8062355759b2499f2e030d243d5f932f91eced78b7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144513 Malicious code in loglevel-lynx-rate-limiter-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d7323270e59e13296ff1331364ed8cf765141361a3ac7614709d7f67298830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147374 Malicious code in restart-changelog-heka-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4e9d744ae94327c698804fe82966dbc2351c5296bc154d46f1937541b8f1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148323 Malicious code in stream-lint-magellan-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd7ba78ae6ff950c86e95dd3e3febac32c90c13ee98faa58fd9ae9d974af8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...