Malicious code in root-rain-catch-sigma-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349fa5e6dccd1932baea7494697034aa3d9214462fb6016ff5e68a1bf986fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in user-double-signal-node-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331f615747fa4552139398bd5bd8ab96fb56c9ffdc6d81e14eaece427b08e5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186318 Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rshafyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0bde64b0746538488406e5d473dcea29b11c3cb6d317a47ffb7e48974a67f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183174 Malicious code in kidt-aog-uv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94dbace64b6167ef3a6fb091872bab00afc94357846cbdf0c2356276a39da7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172246 Malicious code in augis-pom9r-nmn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8569be45fc237102132a1b2a9c420e2b3d51c4d26bc10a9cd784b6ba38327f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a614922b86b6aa2c1aa09253d38195bb3a61875b3b6c9e60873e0b54c705297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuylbani-nikubamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6b2c3e995fd3718dfe784d17a3d4aee2aee6228cd96be1165eab590623906b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167710 Malicious code in teagood-namakai54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e5fd36bedde666e73f1999fc68a0b664832b0ba1ec427013cf942294f9fe4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-prettier-css-loader-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9b61611b12beafaab6b312ac0c7e46444736a1d2d38ba6ca30138be65e83ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4be6019ce947a4d607e0a10422e4df8db65d943752b55a9d75165d88ef3785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-oblok90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b829043a5167c11e06244b4be6c9e9f7623a79cb727d7013fd030ece2e9423c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-liwet84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92957d5462d6f81d962712eac83d953f095ac7a406d6d65278c3d194a2241a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130175 Malicious code in sinta-oblok88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e29442b28315411659def6d9824823379881cb491a13e34a185edcb828bb1fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e64aa44c81c7aea6959ea516d8a6b0dfecbda4c39451e80cfa2f533c4e1554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-otak-otak91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b9b364f9170f6e7ad4c970bddd383737274ea8cc161a29dae496cbbade3644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129298 Malicious code in partial_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081938676ae03c13032d2e58102d50a5eef5722315c0ae462b00d0f3df874709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8495fa86ca428af9b981733fc1768535b3a780dbdea22d9f3b3bc4386f6cd4b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-mendoan83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc06dc7dcbf70153af58b1737e90d28c2683da3a1e729ba2c0d10a60817861f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...