Malicious code in umbra-jekyll-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c106822cf8e3fa26d502751c57e0f20c137335a06eaa078c6724cb7fa72d9938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ssetgs5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf6b97d6908918c21fff8904793446f2d63c2c7f133b3d566dc8164d9bac24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181946 Malicious code in flights-ilutg-ildgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2756271b6334628803d639e9ff43ec25927fa3d15b082257d1081eda9b3811d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-dav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e31157b8fca5acae27e54440153052740468031f94c695d1acd9d5388731f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184794 Malicious code in poliaoz-aiko-avuhuku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71a11bd93f13433477226e847092a7a720e6f4fd1d20f8143f8826e2f9cfcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fambavcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8168426b9769cdb2078df141ccb6feff4f7cc3cd8b92c066f65928eaebd3e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahiu-sautg-infar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce30ec3702865dee8dc37e944a3569329be07a85195f799ce9cc6abb1955734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3610be3e459ecc1384d23741fbf97ae9eb323d3989b3f235345373bb8a188707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuragi-sutaufa-guivoavog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607f7a6e3e61b54819b5df9a2d886c3038f3a0969b03f14a36354b881f057951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174933 Malicious code in inul-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d1ec4d11042392e2e4ba3d1848ad16092ab309246895db49b16bb5b5333549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178029 Malicious code in polymer-ibhahsbo-sgdahsdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d7376533b97109372eb50e5160a991182663a596f84362e02697ccb3caad35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175026 Malicious code in joee-banut-imubuair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a84d936d2fced7dfc637dbcc1d9a55134a6c4172e854a8b713436122daed85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deepikabose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657be9a590335936ee764068e1016f6fd18b0d785991977736ab7815510138d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nbtabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060ac6d713ff926246f0757aa633cf7c1857e203eb5ccacefbc302b901619071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adca02eebd31a3c90c2bdb1e1144bd21ccb8b62e391df4aff64bfea26d9111d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahaf0fafuheg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33913d4d5409e479fc98563fef3f5449e4dbcb0c376fc1fef7da271f822bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a56abb9872a865ab1e8480e99752121ca78dd1a61e2ea87e6b4b6cfc5d06ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40cf56861f1c92397ac22fd648d693f2cb3db2b577b6a5bf3550c7f0200c52ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159902 Malicious code in mansioda-noda-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25af94d03f91c60dd510c099cce6300e6f3dc0aac9c11b05961a23f3eb46e322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167434 Malicious code in teagood-nalikami35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882cfced14cdeafc848df927c3c685446293f66bff6c3b70ddc24412b427f1aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...