Malicious code in dioago-kamkoi-alioulima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61c4f326b1ce34a54bad30e8db004243ed3bc25f040d914cb9d57fb429db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150646 Malicious code in @miptaa02/fhgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924b2c30ac746ff2b42b59fc6b0acb89b4679be8cb5b97f10dc0556c08c6e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe6f01fe09d3ba7780d48e253bac22ae6879a5ae353be343a313d3fc5d3cb61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0fffe499744327b3ccb7ffcfa64f4c2479a1fba276423d182edc8e7ab6c30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154625 Malicious code in dian-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442d76e901acec667901b0d1c13eefc9e266de805ff706718cc7089ea8e61b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151863 Malicious code in aiboa-molipie-aramisiamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e969eb68e6ade1d13c6f71365c59c118f356a6733725d91de9319e58f8f101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc738819e624c0c6d334d661ffc767cc7fff6e89830698b2a71644be78526f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163714 Malicious code in nudela-aahff-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e39651a85b4ec7e68ec6cf539dbf1a3bf52c2a5dbfd8ad55ba1833e60e3508c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168727 Malicious code in tealove-reborn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e36a4c0235d6e0f4cdb1139721213567648026d9d76dd4ed8449a2b26592b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160384 Malicious code in messi-urat-disa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48eb8098646aa0e2f0b1add62aac99707ba38ff88071fa58f19bb60ad890843f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-ignite-carina-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d58af40063be0cd212eab0096cb411052d426f2505714f8cdd21598a657b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-ganymede-cypress-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd6e41a91413ea14979cf90c42cbe9942a3e2691daf8927c8158eef192882f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-xerxes-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69951ea3063a19a4b6fdf535ce96895993a9bbc7b93ad9729bec801aa77fc0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-node-config-charon-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbaae974f522bc9d450490a550cbf10ae06f437364b076e1db60837253cc504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145642 Malicious code in norma-hermes-javascript-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3145239131249d38911912839b909da09543c4d79debd3368f5ea461512c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141085 Malicious code in convict-pulsar-odin-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5e10a1e80dbe898a0eedbdd73f7c13bbd6e948693740434284cc0d8da36917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138746 Malicious code in furious-coffee-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f34ba239c827981f1b70d30d1dc39eda68b32d6e379a238557ae9cea6fc1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kue75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc91b4aea1b412b530b1afcc4c6da14a06d8e91be12ed127135cbca0eb935a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...