Malicious code in shilang-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d2d4e8d17499c177ea37e854fa981f336bd4e4b9150244fde30a2acc42ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161864 Malicious code in namase-namuda-baukmw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda2e9ba4d352243d8bc41b32e29b8709f532e125d27cb0011402ba950f1e91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166351 Malicious code in sunden-dilak-nulikanukinan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a242173d59707d61429fc1c9a650ea0985c0937c5252e7d3540792fdd7f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguaafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb14b0b955ed32fd9fca05661b2927fd0a8413fcc41351ca2183447f92789f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyau-tdiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea98f9691899fd5c495f769882565b9bb9dc15242588f84a11b5f9711aacfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a31a97d2e39472c0d06842c04d666b93df20bb44eb6ea2cfcf1a0f3dbc69c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21a52b06cf174b3207f738e656d3d917ebd2e39d6781caf5a968fd0148ae5ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150305 Malicious code in @mipta1/xfsizzx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b8c695f6a037a9df1686a1b4a34f9ed5fef674ac8e8b98b5de400e4ad5a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166619 Malicious code in syahmuda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d159e93b8d47e9cc3ab72e6609692e90beb554296c3c743b49241cd50f68eb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169145 Malicious code in trevora-aaissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717237434cfc807e49cc7c71f722b92bb1298c96692d5f949b21e4059500022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158795 Malicious code in lookingan-namala8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68ea95948a91246ec4ffae008daf9ff20a9a34f9dbae9b86731bb77fc935209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150816 Malicious code in @miptaa02/masia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c06527ff2e88ea7978484ad3fc871e2483137530995eab6b047f8f0d87da6e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145081 Malicious code in mocha-hercules-auth0-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0a8d0cd21f821220e7b075d93263b825737c0f630c3efd8dc80a94ba767298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141693 Malicious code in dorado-module-centauri-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc48c5da0d6de22d1a878291edfa6b66e1ba73e9a36bab77ba8939963d3e8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143862 Malicious code in jasmine-procyon-capella-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d840f6107f0d615fde8a666d226e15946ccc996ec6ce8c0f8edda4a7b3ebe8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142665 Malicious code in foundation-aether-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d44ea2a5a494b6383705c3bfdd4225364b53e682092e07f297d14e116667c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-reveal-md-charon-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b37b082f09d00efccc10b37d131440a35f6864abbfa175f1808668340ffc905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original-lavender-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7cff724291031461ab159ba45bb2ac32653ad7f88919277281836ad9fda92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-klipo19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f0072b69eaa1ca4129e4435ff569f18dd9c265b464d364e6edeb50bb6e73d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132231 Malicious code in bayu-sego67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8839f370d4ec5967785d3ad8454feaa3c8b928bedda0ad84ec70ef52ad1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...