Malicious code in halley-semantic-release-playwright-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144952 Malicious code in middleware-dotenv-pegasus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0f4941cf5b5883299433711cd0d4f41306c2ad7d878869705eb0d5db5d10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious-indigo-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebd9a764fbea22af91d1cbb9aeb458532b70ecb83864134fcc1b937c5b5558f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special-brown-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616776fc9a4305920d96d83a80d66e81a7b76d5659ff64c2e3c85883108928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138622 Malicious code in combative-crimson-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea20d6db67477fcb5b1856681f899c65c487c208feab659f676f57c06e0c1fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-amaranth-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dac78f5970a488917285472c72c67ff53a0c90384e403cb076c30578a0e865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138694 Malicious code in eventual-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c94ea4747f8fb2dd59ebc025790319974d67919d0575a61923400debc771201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-ongol-ongol55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f9d835dcec1e74e2dd77ecc3f3ed51e65663024348657492fd26fa24e76600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kripik87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3312cf16510ebfe179e02bd95d9d7703e411f94f3f6ebc30aa5a478c01b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rawon49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb0063137ee1d5b6b2ea32cc91a750628bb5ebef6946a2d3754f306f9f6d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-miebogor9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e217416aec33f17da7ca8fba28a18e594aecdf72ea2c4bfb0fceb7101041f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tahu28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c242579de1a81b581d8cb91015937d72d02d8c5b80f45fa7156241b3bf21ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134316 Malicious code in indah-oncom22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1751a1afd218cd358e36285bb7105e19773b17ea2e6286ce69bade42e5281492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135180 Malicious code in lina-mendoan38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33de9bf2a6fe4180be4ffccfef5b3daed9208c15a87d0ba1e34ef5068204e464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-toge19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211f438065071c7b1e421d5e166cc13aeb5c375664f855dde9b369a365c9d156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kolak44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1533aa5e39f47baa8a5ef8bc4ca0776c1f23b6501fa57bfc015159bfd147ec11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-bika97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 352326555f251d4555ddd7c5ecf820682d7199bee485953006026a9f83b6e9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kemplang47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd92d98adae49c025696f73daf117802f20179b4ea0d3ec9fb6fdc54e8f78eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164de87bd9f0b5e19910112b44fadd16abab235aa05dc64905c0df1edd3de3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf8e68bd1edb1fdea25520ab420a8cd20e1583da7aaafe8e19689e1860e2549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...