Malicious code in biohacking-hexo-nebula-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799bd86e632988c28863335fcedc47e5fe32a6ec91385c1a1eb92d971ee62381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182099 Malicious code in gocay-guga-visagoijhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8ac2d0ee08d6f335aaf1b7fe7e8c89fd9e0c70ae5f08834ac28cd42a81a64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df34f343b0df7488b7f863719450e1e47f94e1e132f46fa1898ba3bad0307439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181103 Malicious code in teate-thy-sonic-woggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdf9f4f5827031cc93a000631209ef9f0a0d7026a01b8692e239df036b0f14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-idasifovagfa-ratavadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4581f9f03aac1cd7a9fcaf9b74dcffdaf1b399274346f21a419e66ff6fb5335c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfi-diaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dd04a22634d7eb9ea20172d8c9b813834251db957fb5c530cdca2e3048949f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179213 Malicious code in tray-iutup-ubisap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d69b1abddd215fd1ef8922855e3fca27e3efe457ab4c7c2a706ac12d01fe270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157634 Malicious code in keyla-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a2e12185d9d306eace309013c1cf22409440626aa57f525d1b04344e803e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162624 Malicious code in nokire-kilua36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d9095c4987f372b71205c319fa487a52d6c6a1dbf82e72ea4c340d212d98fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160205 Malicious code in masiolan-of-doto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8832dc5b2010b0fe909948735878280f8cb6f33d50d757369dd81940b87b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166768 Malicious code in teadg-osss-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb13c8ca41cf2f103ee8d520d51d9844222a4cdc52bd9f45c3e26b80519b52bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151539 Malicious code in abu-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0575919af637422d695f6ab709ae2560dca4811502880171bb0f03ef15dd73e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162002 Malicious code in nasution-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3d99fce3a39194e8c1026b97ecf94a75597af507b9fafbee737d81e69b0558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140939 Malicious code in commitizen-rimraf-figures-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aae2714021dd118c8ba366f6b6870e5c1419b5ba2ac2523986e777b5c22445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-dradag37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f800f73797f291b6c50360a6e3e4f50d628c6b6e25777b02794e03739bf875d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130044 Malicious code in sari-moci20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b0f169520bc3ff8c1542f5486ae30b84c609c7242c38817145bce7fddc9e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-lodeh33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cf44b9dff3e6273a1b43a2559a447f6b4380e1cd6ed561ee3641e448fd7065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sroto52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ef12b053ff53005307934e94f2e29ea6f3a394c97253e99eb85058be7ca6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ulashor-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba10605ab745e7b0540f648d54651740384c0605811e4e8967030a245deb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd3cdcda9d4ffcb170cd9737da4342c6e68cc8c6ddcdf2f4e9a0e65e30a13ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...