Malicious code in technosignature-taphonomy-pino-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb950925743b43b318dc4f6962ce166fc091c100004eeb753fc231ed2ca9452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-geochronology-rigel-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d371d95824a99bc7c0274912a47abb83388ede4bef9957fd5ccc6581349b5988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185647 Malicious code in augmentedreality-version-wavefunction-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2503586da8fb0802fa3367acc3e22e67b9d508d0ea7d14123f3ec4edda2e8203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-tehh-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8005420f14b73e1818fdd4cc898cca4592448fa7dbfa825030acf466837db330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alyssadavis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 787299aa1b31a94dbc04ce022fd3a4a903094aa42e1e2c5bbc34d7c4cd46d454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46747f979b7d8b975ede7515a1d06076c309f2f5fece1d01bfd78889555ed3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-websockets-spica-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1ef2938b730cd97e02dae9fec4f5bfe408c0438a5897d9aab01b98b7691725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-terser-webpack-plugin-ursa-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058ff3c61f26380211cb6100a4dadc0e5377421f361087f0ef9fc8e44f437fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-schema-commitizen-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7746f3e8f99af9c8c47f87b8f62362e5608f4873351d72567cbf9894e781f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-forever-vulcan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d964a2ac3b3ff01e0e1881b5a523f44e15739da835226a37dab4da08c7b4fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-izar-resolvers-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a98268bc4d6827717267c3f7cb7dcdb135f6828102d3a638c513591381dff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130037 Malicious code in sari-kue36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6963f803abde4e535bf522e4cf644ed24a4bafbb43c3ca7861ec4b7dbbf9d17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kepok40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f76b63613711f98c56a3e1cec35a32701120c7aad6e207d7954989ea2bbb5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120183 Malicious code in galih-lupis28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d211e335ba1531dd64f14a4917a8e58e7eb9d32c8db46493aa14eacb6269f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lapis21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1920839a17c4e9db89ed51d6640ed3949492d781205699feb3debb38b7132885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114023 Malicious code in fitri-lupis84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf2be456323b3d9e0e21dbf68077e34f8a45980568725cbb65c7588c8578c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tahu71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6d0dbb65fde742059459185b4e554a2b4eac3072cca23ba09de9bf5eb6d0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_caribou_peach-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285c8e7d26954f805c8ccebc538afac89b2dd13a910de962dfc635ee3463836d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-nasipecel39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b01315cfbdf39bc10f4db5a0b5da3929ecb5637d869f903ef21f8171a46905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83000 Malicious code in agreeable_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b8b4e6df0324ac428627540038bcffe278fd267f26c5eebe36476a91488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...