Malicious code in @mipta1/hykh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce04e320fd7254367bdaf8b578dab298b57714814ed8432f28e328b8174d7548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-korean10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c267b5be553aeabddb0206ec85f1acd92c372d8df10071809b55db83cd41ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nitaaus-s2-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3007ce29a24a023413629665731097fee68e9efbcbdd5fa89da71ba867bd2fb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobagilai-janqigaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7687ea6e4ee78f059103f92087a74d3de469e69c94b5f4741baa759f457be266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1dd7585e862a00ef8c8992a4a5ccfe291b8713c8ad4a6c5bade64391a3e3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb086e27d7f4bdde905fb952a730576228799ce0e2afc819aafe1821d033d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160893 Malicious code in munir-ert-nabfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05830f618b9b164d2660324e4030997a105724e898bb7db583f4e54c4d2117d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156261 Malicious code in ilop-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a76b2f2c88cbd56512baf5c2e4c5b0cf6a102fc494ba293c784b8c53c3024b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159779 Malicious code in mansila-tdhfla-mafgfdgghjhghla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a48c7a8aa04ada74cadc791ca60a362b1ac2b22bfa7468c437f3fe5517f745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150889 Malicious code in @miptaa02/query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed15cbc33db311ab1a3606c7395a7f0caeed3ae7c49d83ff6745bfd643640c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154120 Malicious code in cinta-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209de61be15f4871504aa8ae135869c728c379818c8028f06d559939d2a6a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164460 Malicious code in polymer-minats-addutfdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6eabdc620605420974f9a929b6cca2e5b2b48e692f4e08be02c1a5857c14eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167222 Malicious code in teagood-nakama56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89093b338330b810d43702eee758b39fc2239170f60fbf3eef4b52f3cc685365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-development-meissa-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b0cce58ca27bcbee4953b748ac079795ae9012a13e66e88460614385e7f92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-mensa-build-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd565218ad210ae83638b08826afd3326949158b5c7ad8415737c705310ebae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-testcafe-triton-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c1dbfc37a1f15e2af108dab30a536018b040f669ec38985a0cafc4f324fecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-tailwindcss-cz-conventional-changelog-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e92db7dae7fe60b036aa01d617d1fd2a1796d36377e1bd079809b62a7add8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-epimetheus-chromedriver-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499c5deda78848da3c8ef2f45fddfbd7f4904dc9b2b65ac991103c381deed7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...