Malicious code in apex-aurora-xml-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7d0a68560ea990b728310621a54435d29f21a74d08f8126b4956b41fc0234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186448 Malicious code in cypress-geckodriver-vulcan-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e7b3c4e75f8542f11b8a92dfb8c43d2878628b0adecc1a5af688a49451c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4279ecceb3cd250c2fae4014661715e8540aa93e70b594d8eb391c41c76087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifatuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb82205c9bb56f7812c30fb833c00242c29c0bef508ec4044014ff2cc66e4b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7182075b4a7d4cb7a4e3cf2aad5865140a3b9aa909e06fce5ac62032c9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-muabavdzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1525c96b7562c19afc37b88d9984affa38e204a0ead737910eb41722581499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171567 Malicious code in meteorseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643b48655213e56ad9709ac579d9b720fd41e6adca804c80579acc5c40d071bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc684f820c21227bafd1e47a8555be11e73c8efec7c8532467c97d7dcd186737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-2za1-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb99e1d2b90317b17b8e749aece6c423dc16d5735ed5b52d02c0ab5ef63db09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162964 Malicious code in nokire-nakala13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e4484105ed21d4666df26122ba3936d8eb16758c7aa71a39afba11e4f2a7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167546 Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nasr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e511ac4fa24e29a73d0d21f72bd66df53cbf6b70c3b4ec98c5de67fabd8d2a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154785 Malicious code in ewa-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d1efb8815b4f249409c4d5a990d12508e5e1da864a842a3657e63a93126559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-halley-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398cbf2aed0a021ce9867d71a7b7748b8c94de42d368fbefa3c2b94326010a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-dynamo-draco-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159379b4e08c7c6bd86618d3fa0991dc921aa71fdd9fcad571592d2f5873fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-miranda-socketio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec621e6726eab4c97228945d899750c0f1ad4ebfd72f119c1b2c51100b87228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-virgo-eslint-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9404d1108d6ebae69e8398bde30e94e093d70c651f9acbb8f4610383a52ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...