Malicious code in webpack-borealis-paleoceanography-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbf8f7f7c20f0f2447cff594b125306eb9f2baec1daf20a389df5654223f40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bec58794ce29f7bce039099f117f7acb61a0a23eec6ed0e5641b94add8afd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178082 Malicious code in polymer-reyta-biuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e994fc75adf0456546fa621207c12c83f50334af839d49ff68c1f2e2d3dab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177400 Malicious code in poglymer-ogmih-avigafdoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cabb42f8b02cc65f54fdb9b85e98bab1c4fc31e08f08e8e881c1a878a503ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176058 Malicious code in miftah-miftah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a177a268be549d58b8e13b48e41d765fa93e429cb8dbe2a74fa76ac0148d336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155794 Malicious code in huda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64fd1c2bbf94e134bc63c2d95152d407c280a9a6840126c011ae7c84c4738c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156690 Malicious code in inufgi-gotmua-anabzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe487d911282e37bb82cc6497ac3817d1044cdd34d35f7a6f4210056d3c577d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163812 Malicious code in nudela-ofgfaf-gajafhhagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4a8025659d4944804f97437924453b9f5e47d338963325c0843e6a23833696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-run-script-norma-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dd668333dd4330da852b8a90a702cf0b38e7a8f807dd442277790b997ee2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-puppeteer-janus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a71e3a54f79672239492abce3e49d32a7cba8825e348aef96f06b7869ba5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133601 Malicious code in front_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ca3c48dbf58152b560739836dd31f8d5d3d78ea51f0798e756fbb9e79d54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136172 Malicious code in passive_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc27191c5b251d889bf8c0a82780a1378f78faf5cbb93efc9622b6d2e30875c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125106 Malicious code in bayu-getas9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97036a32af2dff9217a2b1992cb55d08fec31cf987d9355cbb3c509efba531a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120428 Malicious code in hadi-peyek28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d598036f348388d46e0c747f089793afee1f9ff6572e21e957ead9ed217828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112482 Malicious code in xerothermic_yak_coffee-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8802218039aaf63d918289d22b924dc52766b15f2f407e4dd7ce9d465438486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105670 Malicious code in mature_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb624f4f0a12de65351358f6f4d64f8b71095c5dab4e0ef831af5b7d84257ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106805 Malicious code in orthodox_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b508c505454b2303ed3195e73bea3aacbb012f306ed087a17e157a39c6c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109412 Malicious code in suspicious_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b69ad2a6e8f666ff9e2fa7d35d6f1d9051f961a86d77b2c57e506432880506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111069 Malicious code in xaver-mangut12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f06c3ad73230c00cb2d48240d68a67b78b27a003617463f27d97eeb4d43f094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...