Malicious code in publish-hermes-halley-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4edb498873a1a185d21e0f0373397cc9d6b5e04505b9f46ce340a338aff3ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-less-loader-public-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab89e3eb545254371daacf9a56dc9363bf5b97df517aec1450925538803cfb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-nextjs-charon-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf1870bf9d264375464e548d8535ac54a699ad95615e37cc390f8af9a2ec280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-lint-staged-child-process-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ab151e5c0d52b2aeb1c511fc8e2c0af1fe4b76287c652e201166c704efc0af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142722 Malicious code in fusion-arcturus-uglify-js-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcdbbe7e76603a0b829939b4894b608d87f4f1f8ec3bf93f24904bbd379212e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146765 Malicious code in public-passport-event-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf8003ea6e13f7738d4e65e37de9cd73ca9fb6ca0cc7bb83f4a2ba932a3f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139710 Malicious code in aurora-run-script-ophiuchus-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241691cf5bdd46c9383783776eb754470cc879fa8b4b29a106fb767123215e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141542 Malicious code in deneb-europa-halley-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de3316b78b1b3497cd85456c92a3f1faa8d33e4f1db4ae920316ec0965c5dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139078 Malicious code in tight-apricot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313adfe19a1739710ac40ad1d8d6f8cbbc5926b0f0885edbf374379c5f5cfd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-soto37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a92bfb247c6c26dd52035bc2ca4fc1bc40c05476436ac5ca55b41848ef407fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ef635f28053876b3a78712504f819ff5b8240d510d365cdbd90627564a669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-ronde67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acc2b1550e9132e7bc0d8a6c3759f0a97fdbf0a0f24850f4335aca20d1e05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-jengkol33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6380c833b62fc3a40536e474db082f4e66f245675ebc5bc5163507f35911260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-miebogor42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a0c5466f703edf2e51094b738e19fff0609a117b2603eff6c808bca34bbb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kembang26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e2670d66829fd30de538dcafe2055b0941fa29169950f27b1fdd65dda0f2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-rawon100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0528e5bb7c42526ef7842ece28f4316729ea3aa65f263199202dfc38556fc545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kupat42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dba459c436f6facfeea0d7e0c1af78498f16f2cf5aa35eb6f4c54242b6780d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6c0e45e6f0c963af8d38af7807e79f74b4a693754a0b1d6cf5870eb79d36de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...