Malicious code in pitra-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428cf6217a5f74b3ddb997610505c9a0cef06ad7cc4dd2b3cfb3238ea293b929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153206 Malicious code in avminah-fagmas-diogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527acd7c3f1d7e29a77ef892ad88f9cceb80dc8a1385ec8536b9b1bf4a011d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alnbio-toliaanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8967c9d03f3781890e9f8ba5b6752c00af44df9c0d33a363c69f41118595be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-midefafoi-ftusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b44085eb24f71ea8fe20bf6df707485cebf2feaeb07452b1035320ed54f4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ad0b970f8a29c81c023bad5705a25fedd8612c8c20930bb449d83c17ecf2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155195 Malicious code in fitrok-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfa9ac4581272a0864274ec8b58843feb856831106211f2159a15ec80f7d77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157610 Malicious code in keyla-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6c55fd6c9a4c52c0649738fd61e960c75a8859b7590c3241588e48a8c9b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169234 Malicious code in trevora-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4eb22763416f5dbaf2ed2e8833eed84c75b33ba9f2d637a5ed039580da25a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-ultra-centaurus-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c0db9ddaddac7633e63071583d00d82037f15b75a57cb7b68e460390a99a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-kastra-lint-staged-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14251e09c02fef4bacf19a323b84b837d727b1fca4158504f2134a130218bb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-semantic-ui-query-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772e26511ca75d4e3293ea2926cbb7404b0e62d26f1a7aee402169932f39d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-grunt-transport-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1983442e552e785211f2494e7a99bd6132c23f905079524cf38ed39132e26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-relay-request-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47db78c95ae987d173aa06cd11ad9777df685935d01b883b22c230b76637f93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-bellatrix-cosmiconfig-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bfc0a9d123c2f0452947c5293ca68f12066d3aed35fc561a356882b87baba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-norma-toml-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebd506c20629a6f6c2b40cc07276461e3e5b8f00c69196c8ec653bf731e927c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-version-dependencies-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8aa777567e102ecfa9331f56f1fbd8e6f529afe415a4d19dfb6fae86fb8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-webdriverio-husky-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5148b0a76281c79123cbe77e4c2e9157b06d62345dc817344997543ac5c6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-hydra-jest-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9932132f6d9bafb954b656330727089d6eb11d9a744fe3333e8dd7384105b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-shelljs-miranda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6546914dd8fe611917e0f0472d9be7368d424b3c5e5960f338667205faeeeb1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-deneb-helmet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...