Malicious code in lookingan-nalako37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 171b62be9ee3065afbf7ca835078d39b69df92a7792c0cc1705d5ea1122c3bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-suatfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40491f41b88e2fc211ad74de54f84795401a0f854f154b070984d015b25d64f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-avior-sirius-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea92913ca746cb08deba1e9521afb260165ec52b0ff7c0cbbe937855ba8986ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-fusion-terser-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e52675c558394ae57cdd87ab9345caba594dbcea1608a9bff66bc6ab90bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-algol-websockets-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf4c271b9245edc7db96e560a7f0eac8b19470661cd7e26a2ea4f03bfba3554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-sails-bulma-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de5c6028b26ad9a9940e7d720b72f2c73610b323b7f8177b16517880b5f1849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146685 Malicious code in protractor-event-meteor-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5466457e913232044e97ffd8f47292ac4c038ca9675f86cf57212134a556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146785 Malicious code in publish-gulp-nestjs-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8834abb9c3cfb987d850c0ba81ac464810cb8d694264d1778af4b4e97cdadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148183 Malicious code in spica-yakutsk-hapi-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad760eeb5a0198df33dd10c2f8895b2589e502fb5a1eebbde8b5261993b8a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143977 Malicious code in json-nashira-kinetic-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc765289a745bfa7fb547425100b136323a1de12b213766030bab7718297c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-koa-nuxtjs-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e396ca676919a7d8b282472201332846db947ed7a0adcef9d8f0659a08b91ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-achernar-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25a04d98cb1ff32a8ed86064410e8eff0f1de7c3b742d7fd02bb1db5f63b962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-superagent-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839f7222c322fbdf927457e0e47acfabbdf8739f68a3152c7bc8f9f55b0b19a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-npm-husky-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4121d03d3d7344a67a6387fb32c258d9a8f98720a9c72f0c3078d499a9a5baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-standard-carina-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471054d89f05ad64142e36bdcf6b6929a903822f04b7332f97bedbe4bb1a7c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-jabbah-private-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b8043e59a6d62401783728f39ae721c11121e22aee1c7fe10a37851fb697d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-request-xml-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffd5543df0e4db9f532f3624ab9714d84734558324dc27ad9121b17db8a5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-jest-update-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c5507f525f0b7c13e0a023ac4998e1cb4cbbd33c5ed1721695fa1b08ce51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...