Malicious code in framework-bellatrix-await-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9df861b47c98b33c486f725c68c2f4aa0a6bd786a502e39eb00f5c48648914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in float-encrypt-awk-dog-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c90aa27b8b2e55c0c6642bc683065f853ef3a1db966142393bd9fc8f637f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186639 Malicious code in draco-gacrux-carpo-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99af30e309e14cdab037f48e58b659c2e89b47c57ea0ca10d2d97b6c7f47586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acavog-agaicua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2c32753b0e6c6e359ed6876d318de6f17f3448b22f3d8d8c44a1b98826a20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176926 Malicious code in nurai-sutaif-danabufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72650fa0033b83b981496abb481bd159aaf7d57029c699eaa53bf0dded9588d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimo-nag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a776e7fe244c77d7d2e9754e18a8c80db142295aa305464d11ca67dc2accc596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-msssi-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9766c8d7bc4d3857a11bcc081eeb20af10f806efbc7e9ee4be622387b0d1ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6418be1af3baa2d15dd91892c313f873ca83c33ba82fe628dbffdab67b279c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uhao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e145e72be5016bfaa9a53799215906a79c70ea169ec68a84b9fb487faf711b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatfa-buaat-nagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b9a274f44a2dd6314a58ca60cc1db7fc951068f9b48576b1fc5fe05095641b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-ma-sayuuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba49a838681c56ddc259a69626d96c26b3058dc3619bf06b7814d20063c4ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-spinner-gemini-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746ffb5d26ec0c2beb4033b4f6c4859ebbc33a46b29f81cce2bc4daf1967c915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-meteor-frontend-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1f0cc1a5f9a889bb9d25e3c44471dfb495105e55f34256120a75de091f1531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-titan-mira-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79408ce54f9c53733daf659f97806d17e40693999ddfac0665977b04ae1c8558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-phoenix-io-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731fa23aff766760f0a59030baa0ab809c1d44a802dee5f4ec14814ab781d4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-request-rollup-plugin-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69561dc4e7b46a38b4c19ab3eb13a91df53b9013ea0c195cd527c8664950b36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144429 Malicious code in link-update-jwt-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d19bb2a6946efa9f9c2e4315a157ed2a2d20cf0be24ac89f296e1801214eab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144373 Malicious code in library-chai-carina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141109 Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c32eb0a3ba723ebe11ca4df1274d19f003ef78d0984d760230a9baaef860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...