Malicious code in yaml-root-xml-process-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa0f9574427b5738faba6baaace11a9da2f9b5a5f3797f4432fe01c3bdfead6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e85ed465c209fa476f5abc20247074bfd8d2293719aa659ce09358eb3c661af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae659de349f0cc8b95ce40c27ebf4d8c6d4f613ef55ef14182cf3b4f701da4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f721dbe27ec1ad43bd04fd1a1e2e326fd07f90f8abd33c92fc1d89acc79664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152022 Malicious code in air-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099f2885f535fcbf8b77727dc630668f0e8d62153aa7a2e07c9ec1bc46d3cefa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169222 Malicious code in trevora-cir29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d82568bb4aa274be85109d73fbc528ac181e0c3f88362e0c76085513a72a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-meissa-avior-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c513e991ec788a17f2ba39aa0325f26887acfdc59ef2bcb2ec53334ceef97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77974 Malicious code in erwin-lapis75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7283651712f451badd4687219862e7b08505e338f83f7399eb2adb59555502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76973 Malicious code in bambang-toge27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaae2b145f25b0af49260fd7d807a5931b6fd8d6cdaf21a7204dfe79a1ed24ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kemplang53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb13ba2bd9d05ac8becae7300d3c79e222677ebae2840cbb278ad67797106a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-mieayam73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c06073d844edc407a38a64298993e1ec0ca02068d005ed64a70025e3acf215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55954 Malicious code in doubtful_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1064795bd7c2fd84f3c9517f54b37f54343b75a6e4072d79be7fcdffd34c03f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...