Malicious code in vortex-phenomic-schema-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d533291b2ed88674d84856e3b9d0ddf9b1420895789b87beb95ea87124916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148391 Malicious code in supervisor-corvus-css-loader-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e717c0a7c2be48cd214be01d42a303508b2d0dbdda6904c59955d4168e4f36a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-loglevel-quark-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b941f79038bbce9958ae4c4b3f47fbd6a6aa8a398a4c02a26fcab2ba71c021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-upgrade-spica-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ed6f3c60cb602dd42909563e4d53ff2103fab5f610611b4fabfddc2e51955b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-xo-jekyll-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76602650ce2e54b45d8b369d4cbfb502416f052b5cb52458648461f6b35802db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144980 Malicious code in mini-css-extract-plugin-meteor-capella-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2bffa9bd292d3a0b9290865876b6ebc6200573a041491ba008385a5a036a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132844 Malicious code in dian-telurtahu26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d522b5c59dee1c060c19f5b2090fce6c81feadd8955e6a8944548e17f820e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extensive_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49e056610c97927367ba3c922af24d61986a14a478520f56d91a95e045ff883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tapai97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36b40a07dcfbaa8bbf51eb6e7280240c07ca825416a4cc6fd47221261a27989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kacang14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2715e93252e81934fd25c323a4af86c31caccbf1b08d1eb68296b57eba65d99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127480 Malicious code in irma-menjes24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9596646d5f0147846d59e2370a336ec7672ffd2e1ec65c944d25ca52e8b76fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130085 Malicious code in secure_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d202373bf7e2973a99857c6a1bc4fe09ff75415ab65456ab6a3cbb71dbd94694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-rangginang30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebcde47c7f3aa31524f03b4b0df477d34da7516e78cac406cb0e08ce119d493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123890 Malicious code in utomo-asinan73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2b048d7030f6c66c1b94344dfe0150c74b06376ba372252b26d9dc5c3199d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-bakso27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7475451a1b135c53573b7dba8b839262e20ae0940f77cbbabb27058e5e3a1d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117247 Malicious code in sunny_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905d8c46b7c30d53906d2c584ad7f5ecb7e5e70b9299f0db566ae4715e5410bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117625 Malicious code in umi-kembang10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c514fc2f373dc77576cb5d12168b51c055631c3785c8fee0117f0877d372ed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4224edff97aae510af51e8e7b025dde29b9752fb701ecab3278fa7d65909474c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_albatross_orange-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d268671cec5e80ea66cf5a1827f8ecb2eb829ecd76db8d634c71ff286e1f1e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qnnkan-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fba9cd6e1f1fb39237b9e93728fd33c0a5c50f3ba8843bb7f8635ffa02f00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...