Malicious code in root-rain-catch-sigma-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349fa5e6dccd1932baea7494697034aa3d9214462fb6016ff5e68a1bf986fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-bunyan-magnetar-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ce6f081cee557707eacd7810a9814c41e0e6b0fa80e601cf9858edcbc9384a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-lint-helmet-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5a4b6d4af71eeb4c819c5aeed09820f02c8309f1b35be0b403965813dd281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186318 Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in user-double-signal-node-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331f615747fa4552139398bd5bd8ab96fb56c9ffdc6d81e14eaece427b08e5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184893 Malicious code in sonic-jos-afafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50e29e8c15fcb58c4b7357e33a2b8c505d315332dfe617caff64ad7847084fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183174 Malicious code in kidt-aog-uv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94dbace64b6167ef3a6fb091872bab00afc94357846cbdf0c2356276a39da7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rshafyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0bde64b0746538488406e5d473dcea29b11c3cb6d317a47ffb7e48974a67f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183108 Malicious code in item-ati-labza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5452425ea102be4efd47b4be0d2401eaaf8594db68aefc325a94be41b3e7e65b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178820 Malicious code in tanuria-safafai-daufaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b1c8d3db573ced2f426a7f99988df2772a698ebb204eb2dd66a3b30d0cefce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172246 Malicious code in augis-pom9r-nmn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8569be45fc237102132a1b2a9c420e2b3d51c4d26bc10a9cd784b6ba38327f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167710 Malicious code in teagood-namakai54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e5fd36bedde666e73f1999fc68a0b664832b0ba1ec427013cf942294f9fe4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163705 Malicious code in nudela-aafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1404cb1c2c3bd5a66d13e91931ac180faa4d79a80000142b715dac00ec111ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fd4bf57ddb63d39973e7bac83b03ae5017ee05caf573c126370767eee26187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuylbani-nikubamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6b2c3e995fd3718dfe784d17a3d4aee2aee6228cd96be1165eab590623906b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a614922b86b6aa2c1aa09253d38195bb3a61875b3b6c9e60873e0b54c705297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145758 Malicious code in oberon-xanthus-slides-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564241ace50ae8cfeaf5ab8b4c943999f20cb66edf29bb7a2025370de13b0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-yildun-karma-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002463a9ef23a3781a6864d5ad3a340c5c545b7720c5f79a22a9477e198d67d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143158 Malicious code in halley-ophiuchus-markdownlint-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607655a9434cf502c2fa60318a5328e80964eb1e771161aa48914888bf2f2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...