Malicious code in root-rain-catch-sigma-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349fa5e6dccd1932baea7494697034aa3d9214462fb6016ff5e68a1bf986fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185696 Malicious code in await-lacerta-ganymede-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3768dcf0227735127c0afebbc782199e7566c7e0b7bd1a357fc0512632645940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186663 Malicious code in dysonswarm-public-mutation-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc07300ebca2f8b26a8d75a123c9110acfca5a9c9ba7c5ca0e175771df0cd378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187242 Malicious code in grus-eslint-enif-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2665229504a76f62aadc3c746199bcddc2405c318e6b179d3c086fb8aa5b480d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-cryptography-paleoanthropology-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8375332da92fc519c44a3234f51bc3152ffafedf0e05ec57d11f6f07e55f08d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189288 Malicious code in route-proxy-alpha-export-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ed7ce7a196ba7ed5bc586cfdd287f1bcf2abf295da782560005753652fe5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186754 Malicious code in enif-wavefunction-phoebe-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5529fe0b8e93a9c6aca887f4acba242427e40e99e7c53ab28047e01d9aae23fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189888 Malicious code in test-slides-bellatrix-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba71d4110a671fcb6d0cda97d9dc561e75c7fb386b29b0f7f2867f6d222056b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185445 Malicious code in alphard-webdriverio-titan-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6fa009818dee865117cbf148422b8ae696230e95a2f87744c06ab81d74136b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mokk-lukni-huj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a40ae82e9fa02799c989840e6911e64d31afa5c0b8e3f9e99e2a5cce9e68dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutag-obolavduli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276b04782d149811dc9305d2ecfbd7c083261dd68276b4e37f93efdb1c8a0d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-nolidnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29ee5b11de6c2e5e583936de3d53e528f760c8eba052953b3ef1bf9f6632cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinga-uugucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9bef97a49c5762fdaaa911484abdc87dcc1b440273a56ca8bb7bbef95122d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusiafadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5f6cc169daf67ddac03fc6d5ed1c7da3d7c058ee1a8e719b07ca9d0900e64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baiucaufaibafiav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369e0637ed5bb8619008c4a91046259609365d3409c40c25b3754a75bed8d5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fidulgafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff3ba4c89cbd0a14f506bb0302a41669c8fb575057e29a8512db5cb2c3fe504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indexa-fotdio-agov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af6a627b36d8a708e3530137ad0fda9fe06f74b33facdfb4cc2726e16f38ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kiufni-ufavcseqinsdxaodataycrptvmaduuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb423dc6fc06a261e004067c4b3d48ebe7235bcd4f093153c5381dc2d4d7d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifuilit-dakiula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ee287d0f854e2ed88e4f1621d54fd69c0acb10cd279a46e3bf7b5f520b5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-avilo-civbufoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7973048e94f8e26bc0685d9c60d5f668e8580705029358fbcfe94edc72c9a994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...