Malicious code in cross-env-umbriel-pyxis-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-slides-phenomic-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da10031c67bbfc99b3021734ab754a209615452308f5b508f54f13c7cbe23690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142410 Malicious code in farout-draco-supervisor-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4858586155e7e63f2df1e9db1181fe0476633fc8b100b90271961b692e2d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-auriga-google-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cbf0729106f6a375f1483305e9e1799186f99e4954e4f043d47daf81b8445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139187 Malicious code in acamar-sirius-janus-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e2d475400fa7007a588d6df6a05d45075c6cf65f9a5f9ad3b00da0e5db62f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-typeorm-loopback-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbb954ef4c5ec76ea2247616639211ea442a635b1ee9e5ca1c9af788d21e0a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146246 Malicious code in pino-pretty-winston-json-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7ced402c9f3523ed686f438c023726ebfd93a97fbcf9f8146d5a2d75988d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-bakwan85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda09683b130fc5b39437d4567a50183d5a272c16d3a8cacba78baca146104bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1066c42a7cd3f50df3172ad6f9bbf72be6f5bec6aff5b5860aa2ccbb2c48e1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f1779c4ef583b182f42ec1ee9f52beef598e6af225483f9c7b865591d8d9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-rujak15-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2864b81af49e63571d1e9777e315323bec6c69ec65cc71d1e87023fff98a8799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102916 Malicious code in frequent_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75af6780550c1c6e47c55cb1c9e343951b31d679f40b992611bf355116fa0282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110613 Malicious code in vodwup-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3c910a1ff9438009e5895d457d67bc9cfe726c319372dc30c7949e8bc6cc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109273 Malicious code in sudden_macaw-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1919258ad4187f64ab58ee67bcc31bbbb63928e20a407e34e5ad1cf4e43f0cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various_cow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b1b4dbaf266a684ecc84103f2a5c1900974942575076c66019a1866966ec0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106394 Malicious code in notable_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1b8bba26d21464f61b270a1f8e06965463e4e3e2c9efc582529665e86582bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111097 Malicious code in xaver-tomat92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0df90bab99d6177cf4883d62cd4bc2ed2a24ae9954419e95cbe0fa442bb0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109660 Malicious code in tiara-gandul78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567bd0ee1edf9f0e60efd1c576d67eeb07003a8de9b176a9436dd43c910cdedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9c642d0c98a0a99992b52c47896c536de0e3115295e574ac4c09193620ee07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100483 Malicious code in cindy-peyek52-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05eec533ab3b59d4c6e3a70673942830f41879e55925e1e2656781d69b9a1096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...