Malicious code in loopback-remark-cordelia-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03050b2cb2866d7de11164971c4591795fadadb14bdf9da6411cc366238b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188982 Malicious code in puppeteer-module-sails-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258574792c4358cae9fb04cfb28fc03f4155696154704c103851e20e23a91bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188261 Malicious code in new-user-static-awk-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f9dcf7eed16e352a4e0fcdb4e1c39ec368864e56f59a7c610fef54ab9b66cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80218d43debe038bae4e822a495618aa2fb4ffe67d4c10ed73fdf29524ae6521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kat-iadavgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed76a048ecac2c7dac9ac967f148200b305bb5a2bfaf2029f9baf46afb3e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugiukatajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14bd06c4c4e4c61766e632aaf5651d08dc0ae0427f99d3ad1179c28245566aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180478 Malicious code in teate-thy-sonic-hosob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c386aec5946e38f76f81936553c43e1ec173bf5b3ae21bda48556636946c0d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178648 Malicious code in sayaaaaaa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8022a8cdf3fdaf9c18fd8aca317c3019335577bebd0d0612b01bab636fbfb77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178677 Malicious code in sgoodaini-nugusa-utufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591648a8f88555f620b76e8825f61d642d4c8f4f830b03afe94ae025d172493a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astroadventurer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85af7a4c178495c52bdee91250293622a607c820df06dcddbb517f1040cf07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d93c37d198ed2865e6ea5e799ea47e397fbe9ae4ef558c4b10c383cc76883c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161436 Malicious code in nabuf-otiganagaf-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a09752005e8e96cba3d643a6688559e14da88ba64ead2db534c806c33ad982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151409 Malicious code in abina-amugyuiami-ammagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c59bb5bc25310698ebf9ce6bfbfca7cc5d7bbdf94cf26f7019890db93d9f2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-prompts-node-config-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9728734a942a533c415e6987fd3fa55102d80f96c4b586d9acd545f101f9cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145972 Malicious code in parcel-spawn-dotenv-parse-variables-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed298e63ca52c57450c7e91203459cb0de3fb49027e441425ea32d0c6cb9db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148496 Malicious code in telesto-middleware-dactyl-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e618b3a34a547058845867335ff5346d818e294aad90c6623367b21f87e2e618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144370 Malicious code in library-betelgeuse-yonder-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d464d999af81bcaceefdd858dd914d406dc75800c99c9aaf27487492862826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c3f7f826ca07b971146b54b59d5bd56705c8d153915fedf99957885136a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-ronde11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b0e7fa54afb3c864420f37c18a7169b790b285f355f10d7663d683ff3241e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...