Malicious code in xanthus-fusion-oauth-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fa144cbc93e4dd11b40e15d7092f90e2dda9887cd891d011546ced148d600e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d3d9b81812427d006a9d83aedc8ab35ae99c772c8d05c7007ddb3d17c3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lfki-afhgbagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c582e3b756836cafb72b63c6c5758a9bcaf87a8ec65edb9ee26757ab5a84c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179413 Malicious code in -pem-misa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876e2d26bf6a079b582b46cf28e6eb5a7ae18262132063af5f09cbd3fac21176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178100 Malicious code in polymer-tehh-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8005420f14b73e1818fdd4cc898cca4592448fa7dbfa825030acf466837db330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otodofio-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125bb54243eaf932965322d8a83ebe0ce7c2b8133e07f2b5a518a8a69ddf614d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otogfn-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f7016488d2a885082d6d9ca88787ae1d3af97cbae1e5e4d35f5ec15ec6eed34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153561 Malicious code in avomainah-frauasu-ofafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ab27ad27f6a0b243fb86612f1e869be7f88fcfc0758ac7e25fe5c1329d26ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161407 Malicious code in nabuf-otgigaf-dofajgaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f948272e8be0b55fb3d4986b7b79d27076d81c23cb7dba1b4fd5c4fcc4b13a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141469 Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144632 Malicious code in magellan-dorado-puppeteer-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3238269c2f191b403634981c58aa5ffe63bdb37c7dc0633c090a4c8b8d264b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141039 Malicious code in config-sails-repository-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef22d2e7c169092869951d0002a750ed5d23a4793af0396d7f0f5460b51b67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-foundation-antares-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143726 Malicious code in iota-gulp-colors-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431bf4a128360ee6043e7c52edf66bbce754f42425ffbe398556515f7563293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141568 Malicious code in dependencies-fusion-prettier-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b282945432c3d34eb90c67d81f9fdba5527b68fe207aa9b76015411e02c7438b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-menjes51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48e094b23727bb664172e3b68ddd53387e87ffe550e397868e4b0c9dcd3767a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ronde73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c27fa6c4fcbc412812ce7262b5999f13fedd53f9933480c95b9fcf596096df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tek23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9f20e172e1c1c97f1b4b645c6c38af4cb4b5b3a75cb8d754cf6145c2503184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41940b790b36cc13348ae1458e36e3ff3824a2302f082066a93efda32581ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129788 Malicious code in riana-rojak99-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd8023c318df6c9fcab69b25ce8a444010f63dfc0eb90a79181fe9ffaa2093f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...