Malicious code in xanthus-fusion-oauth-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa144cbc93e4dd11b40e15d7092f90e2dda9887cd891d011546ced148d600e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d3d9b81812427d006a9d83aedc8ab35ae99c772c8d05c7007ddb3d17c3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afhgbagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c582e3b756836cafb72b63c6c5758a9bcaf87a8ec65edb9ee26757ab5a84c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179413 Malicious code in -pem-misa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876e2d26bf6a079b582b46cf28e6eb5a7ae18262132063af5f09cbd3fac21176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178100 Malicious code in polymer-tehh-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8005420f14b73e1818fdd4cc898cca4592448fa7dbfa825030acf466837db330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179389 Malicious code in zaskia-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c5e26288ed6e05bb15d411e9f2d094cc2063f9aefa89458212899cb6465999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otodofio-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125bb54243eaf932965322d8a83ebe0ce7c2b8133e07f2b5a518a8a69ddf614d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mijaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935d4421a858f209991a2603c0a46309f27db889f0a63cfcd0e48a4847185c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159258 Malicious code in makani-aiavamoba-iaiufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f39d99f8118f2ae5a4f354060712e16e59574c48d54b957d88a89bd4a32e4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otogfn-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f7016488d2a885082d6d9ca88787ae1d3af97cbae1e5e4d35f5ec15ec6eed34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161407 Malicious code in nabuf-otgigaf-dofajgaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f948272e8be0b55fb3d4986b7b79d27076d81c23cb7dba1b4fd5c4fcc4b13a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153561 Malicious code in avomainah-frauasu-ofafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ab27ad27f6a0b243fb86612f1e869be7f88fcfc0758ac7e25fe5c1329d26ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144632 Malicious code in magellan-dorado-puppeteer-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3238269c2f191b403634981c58aa5ffe63bdb37c7dc0633c090a4c8b8d264b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141469 Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143726 Malicious code in iota-gulp-colors-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431bf4a128360ee6043e7c52edf66bbce754f42425ffbe398556515f7563293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141039 Malicious code in config-sails-repository-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef22d2e7c169092869951d0002a750ed5d23a4793af0396d7f0f5460b51b67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-foundation-antares-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141568 Malicious code in dependencies-fusion-prettier-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b282945432c3d34eb90c67d81f9fdba5527b68fe207aa9b76015411e02c7438b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146226 Malicious code in pino-mongodb-query-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60978187df58a76af8bf3bb453febdb1c26f374f6ca92ace9aab9eefbde3b201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-menjes51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48e094b23727bb664172e3b68ddd53387e87ffe550e397868e4b0c9dcd3767a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...