Malicious code in deimos-polaris-gridsome-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d7daf5a58341775641235bf8ae1045625d4dfe06b3b0772252ddf9a2d15bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185046 Malicious code in sonic-kots-fudvitifayaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168138 Malicious code in tealove-boy31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fac7f1b760a1cf6b56d2a91c1cd0d36fb642e97d159e680ab4adc54b9fc1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142665 Malicious code in foundation-aether-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d44ea2a5a494b6383705c3bfdd4225364b53e682092e07f297d14e116667c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adf41120b2881ac87cceb03496435fd1c982aed4c9acb2c1fcf7f6a55ff1791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112976 Malicious code in candra-oblok5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a0c9ac4f07d35551166aeffc84ac10f28d342b181ff2e3506ff85a68ebfe12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100524 Malicious code in citra-keraktelor98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a5ee1481e12bad14a7b333efd982b693186b684554801db48ec3dbb9946d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98362 Malicious code in siska-sate35-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7edb246c66bb9bf98693c12d68957251d9b73976a96783f0c58a79f70ebcb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92383 Malicious code in xaver-mangga83-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510c45a5a036d17cf7a5eab5000fc55887012c2ad978a111cf0c2b36b9c87d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77802 Malicious code in eka-taiwan13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e487f909c47d68729cf231c51c00628ff2026b3c9ec343454730f073f3927857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gado-gado73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f09a04702f899fdbcf46339d5ff73760bdb2e09787360e9bfc42ec1d43b496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68713 Malicious code in horrible-coral-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd76c69f6ef92b0cbb6cd4464b0fe19d5af6d69185be829bc0ffeb85ed2a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59280 Malicious code in vida-gaplek46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b28bde7a0bfc833e082ca142a274478dd93647ae1e19eefc5a50b5d1ec35ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...