Malicious code in dian-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f185844bac4fc72240f2e40baab4e1e3526a486d39aac54384ef073cf4923187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1dd7585e862a00ef8c8992a4a5ccfe291b8713c8ad4a6c5bade64391a3e3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asin-nsadsbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55fde04b6bc9d859b2ba44b92c084ce851478a623e3e56cc497e2227881c9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156261 Malicious code in ilop-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a76b2f2c88cbd56512baf5c2e4c5b0cf6a102fc494ba293c784b8c53c3024b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165965 Malicious code in siregar-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e923bc82919559ff63b2ae389f8f4c077f7e1cc061f01d696ff0ffb26e563dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166236 Malicious code in sunde-uyilu-vanmiun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8070c6b8314aacefa699b02e78ba068a39610aebc957af734fa5b78991cca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155198 Malicious code in fitrok-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5c1d4411853c362300317659f464e58c70f364948f8c4492c7e37d1fb23f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150442 Malicious code in @mipta19/sehc-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfded366f62b4c459fe041644344aa70380e8a225624d4407d2eaf6c2d3598a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160893 Malicious code in munir-ert-nabfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05830f618b9b164d2660324e4030997a105724e898bb7db583f4e54c4d2117d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154120 Malicious code in cinta-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209de61be15f4871504aa8ae135869c728c379818c8028f06d559939d2a6a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166937 Malicious code in teagood-lokika7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 043405e66cc182d469d0d7a93915ca0382346c1049b6219fb8b710e8b3625ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168957 Malicious code in tehah-kaliaan-konatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e92f25cf89f0b7d17f0117728442ec522a6b9cf61272f9d10a9321097ad9e4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-loglevel-io-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead7d669a16636bce25e9661811f5f47280b40ab64ea3c1e3cc047c9667dd643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-pyxis-rollup-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825b2089e674a1b4f07d988dd4dd46073f675eb1896bfdf21ad1489f1458389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-kastra-mui-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9153be71dd128015064d23635b4510d601f804fe1986f5a7a8af04062f75c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-vuetify-metalsmith-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2186526dff27c6c4fa856cfe4c9936a3d13ab0f924c3f55f611a9ca589374cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-winston-schema-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fac4ee9fecd205ce5a6a0d6f2d2fff5c73dc9b66e1cfa9181d4316724a6a246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-perseus-lyra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e87733bd5fd700c182b2fe085a507461f9325ca6dc4644112ee05a9b4d5f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...