Malicious code in hermes-websockets-arcturus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36606ac1ad475e7549406f6d7bf78dea41167443315514434ec7399172a4d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189810 Malicious code in tardigrade-leda-jest-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc10d3011c67ac3227ac1cca651f3336c62b6433d148e3e9eb1973f82c03c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-sedna-sequelize-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d21c1e2f37e5e821a84eed480f80f27b364ea4e2b3e2b5cc5e1d16499a649a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-terser-webpack-plugin-private-mantle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e48a9fd6450f06e90ee5d9956c154c4f2502f33ea2ea4855e7091ec32a7172e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soniec-kat-fav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bfebf4387b7300087d813091947f6a87e75bf206233ab98c56cf886f2b8598c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah-miftah14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460468fac129db9229268e992ae5e7da102404bc1d5a4f3b5b8bd7e25b0078cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174759 Malicious code in hokage-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45189bfe72791d38873b49a7f740746cb265c948d44425cf2e5413d8c5cacc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-manaafoas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10be18c520f21e61f7efda61ca88d523bb3b6d369771497d0c0baf073065a85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171002 Malicious code in catarinacosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a891afe350f44bf7984fbddc54ed8a87a3be31143a1f4fcf3036316db6581a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxydreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4389cf3143f65e4c75bfa8a8da4fc732023ef484c8b130e1ca83fcf5637c5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-klp-aksaubali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348eef027d3cd0d9ab18b4c205c540edf3e444cb4007e9567ebff7f7ab60709c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166614 Malicious code in syahmuda-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd09e4c3e2b5984bd465f9292d18261276285bc3289e4438a1bbb0bdee83049b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7788e5c796843b69379495ae7cd2d4e0c9594a61434045c326ecda063e11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0cff602b1b177827986149c60978b04a5e42aa7dbaa9ce5f211aae6fd774f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156810 Malicious code in iomodra-fuoa-jafuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1b840d854cef0e33c233b6fa06fbabe657fd7ff52d7b2517efc6453469bef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153003 Malicious code in aviaah-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf923097a375ef28e5b72361847cd7d4602486a7e327cbf83dfdfa427d66f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169500 Malicious code in uaragifa-afaoti-urufuyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb51ed57ee0099fc2bdb80972d48b76c366f90d5e1b2ec9a8acb2eb651c4b7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143232 Malicious code in helios-google-venus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdd3ca350cc2d89867e35e9712945365651243ee77bbb151092965b2539e17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...