Malicious code in impulse-holography-grunt-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c28c8183009a08a11188523afcf95bf4a90b317d6e72e29db3fb3800beef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185833 Malicious code in biosignature-rollup-polaris-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee28aaf0ab1598c2cecd4a41de5df103b572fd7b814c701bf0175aa1cc32f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181335 Malicious code in @akunsansan0/susu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1a7efe930f70a9cc305bb5bcb6b2964d3a3ea17922ab0e845b81e55fce3456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-natpi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5c63195c52cfcc812590e427cfb1699a9bea0d29da03649dbe469cdbb17095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-mejtus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49985fdadf53d83bd5a8dd49fb64fbb2429f24b6bf1b4145f424f50ed5fc2de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171594 Malicious code in moonmoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b728ab96a8b8a09e8492cb921d49f37544e7e377a4ebf666757c243829b1506b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir138 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503831a3fe4b3f5bb1ccaa546ae045def12e9e048fc03788820f0c8c3838e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7908611f8fe804342d7507f70b24d0e882273b5a32c3914423cddcd54d690d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mdds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51086fd057881ea38169e9908047c858e30f1f1ef9040225bf373acbc430eab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153205 Malicious code in avminah-fagmas-diogaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b4b92b129fe9859e15b8e69bb40b5ab255c121e5d51d0e2ae4682c558584b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155975 Malicious code in ican-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf0efc59d9f9f26ae930978e5140b51f452e1935de4e0e5738393eaf916a5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-auriga-express-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e704fcb48a26e6e92d57e74702f29a59010b27f3610b7b864318db8bc6ccf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-remark-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b91250cf24f7949b14f40c0c24691e6116caa06fea0b5b25539c3f519bd116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145010 Malicious code in mira-inquirer-lyra-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4535af8d9a3c92a06b452d941a13df4a198e47bc1d6483cf895bc8971bdd575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-triton-json-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f57591b9b0080897eb363727411b04eb1864ef0f8f7bc0e20bfb6d0cfb9f470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127358 Malicious code in indah-gandul37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc59b5bb79138a07441bb3c6445a84e10858044c078663ea9a7be541d978896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-bubursumsum32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418f6ed5a0c2407b87a503e1c4bf46df84b468cd881c41fe88afeb3b6ed9df91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120092 Malicious code in fitri-otak-otak30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e6e9492d6c7eb895b7f7798b97e5e80be20bdb4786dacb9fa8ad25fbb09ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113304 Malicious code in dewanto-gaplek27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516f4c9252700d284249a2823db924889bed05a00aa473c0502314b254a2510d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99363 Malicious code in alone_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59b844f94fb2cef112a46818136d7b9e6cddaa30e2794ccfae5719e305b1bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...