Malicious code in @mipta1/hykh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce04e320fd7254367bdaf8b578dab298b57714814ed8432f28e328b8174d7548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c267b5be553aeabddb0206ec85f1acd92c372d8df10071809b55db83cd41ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dibok-i1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db766867f02009704e6be4c6009ad55ffde7b52a9c8a30b21610fcd6b1c644d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urt-eu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d725d9b68067156972ebebfdb9782048477ab93d4e0a9957cf8df89df8d96dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c475483559feff1e439da295ce5ff5ad50a484751b7fa4456ff1bd377f3c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-ped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8410d5871526c6ab5a1ecfc664242e29f15c1b7552118f8016fc012b39fc2e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09400548e53fbb6974514fb98c09c884a677a106d9f66a8745a44fd426f381e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efcb67d3750e38164a85c2f391dd6d2438597a7fcd00b9b2452b76d8a0dbc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151702 Malicious code in aciaiaggu-idat-gofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70a281a00442bca767926b0facf18b0ec76c667eab3eda7e6203abb221bc288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166236 Malicious code in sunde-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8070c6b8314aacefa699b02e78ba068a39610aebc957af734fa5b78991cca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165965 Malicious code in siregar-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e923bc82919559ff63b2ae389f8f4c077f7e1cc061f01d696ff0ffb26e563dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154120 Malicious code in cinta-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209de61be15f4871504aa8ae135869c728c379818c8028f06d559939d2a6a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150889 Malicious code in @miptaa02/query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed15cbc33db311ab1a3606c7395a7f0caeed3ae7c49d83ff6745bfd643640c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167222 Malicious code in teagood-nakama56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89093b338330b810d43702eee758b39fc2239170f60fbf3eef4b52f3cc685365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169629 Malicious code in ucok-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c61d70efd2a55d4afa3bf1e6e59e0ece522455f0ddd41d026b9da856bf2837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153912 Malicious code in buatfa-buaat-nagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b9a274f44a2dd6314a58ca60cc1db7fc951068f9b48576b1fc5fe05095641b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160368 Malicious code in messi-turah-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687fe1b7613c3396238683a02d5adf69570cbf62ff9cc71f3bd5dd2f4ff4c9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-vuetify-metalsmith-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2186526dff27c6c4fa856cfe4c9936a3d13ab0f924c3f55f611a9ca589374cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-perseus-lyra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e87733bd5fd700c182b2fe085a507461f9325ca6dc4644112ee05a9b4d5f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...