Malicious code in nokire-lokcek57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d561283d4446e38370cdb6e6d46c707d9128a085bdad4919027bae05eb60f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158404 Malicious code in lookingan-nakomi44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f9b9a842e6c9ca6d3e7130e8b8f698d2b0a35fba8b8908c57b9435d8fe99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163348 Malicious code in nokire-rara58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3804f7dcabdcf29aa77dc64c0dec5663fa7db51c9251b512f145f252c566b522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb2fa9164bfd4dcfb261c5cc3956a5baa98949ecd5670af13d05d9529a0e6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b162aa8192933ac2da2961beb75a570b5f542db543eb8ca0d3bf248490623990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164517 Malicious code in prayoga-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4506dc5d533fe33ea265fc675205b332b2adac8ce06dba712230dc653fb0719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5926add183e75e655b7d579830aacc4f49caa9f3127ac91db7ffc83ffff5413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159330 Malicious code in manadi-scaisor-dra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c066690de1a22c24d4771b5bd2071c9175cbecfc4bb3787ce6e2760748e2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169001 Malicious code in tehah-mkot-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1d59433eb4372aa837283e6fbede20d074770bdb7b3bf6770f250ad1285b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140598 Malicious code in chai-morgan-aurora-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b05a0769bbe5cde0c09615f00b83963a0ee9337ff58ba3d9d9c8b81228f6c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-jabbah-google-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5d69cde5ef8f2e71faae2ebf02639ed7e17058b5e0d56f3a0b45189637526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149299 Malicious code in wasat-restart-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c669fccaa341ec62ffab852152064911a73868724f75a4af37737a8830674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144646 Malicious code in magellan-markdownlint-concurrently-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d3be4e484f62d2fc2a90189330282e1a805f14b6990559ace653282d90529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140074 Malicious code in bootes-deimos-tethys-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf8276b237457929553c4b5e28b51cc0edc14043dff26620640248f1d6fd96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149078 Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144219 Malicious code in kronos-grunt-sadr-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139957 Malicious code in bellatrix-spawn-iota-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e02a2735f04330ceaa2f373020d5d6d3640831bf53b240730c047be4df17a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147258 Malicious code in remark-wolf-jwt-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd162f05a085a9bd6f3d5eae4eb71f22530b58420b2769e141f54389dd035c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-io-betelgeuse-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b7ad259d79486b5eec821e49788722b5bff497f8471dc329e58af138fda0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...