Malicious code in adonis-comet-sedna-geomorphology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337bca060b6e0e2d205280cca27089440473dfbf815ca59cb70305a3995b1f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640f7213106412e8478a92243f16038b2531d6948bb0bf16a02d81bb61b1a257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rintono-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3218dedf12c474433b6330dc36bd3190d694ec554211987d8713d5cb80f5c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-vei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33f77f6d1e46688f45224139239dce5a5d72aca47a834a58305e06b1f300bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-rehype-deimos-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ade24bb378c76c036b71f2cbd39bf86692a9c9c7c9737f14ddbb3b7e65e841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-cosmiconfig-kinetic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdc1271ed7b3d96e54a5350600851bbb30cb982d8b55b36f0b4259d96c41a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-antd-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abedf822a8547ae8ecf50d68853589a4cc4cb7fbee11665ad0ab235d5085f9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139225 Malicious code in aether-buffer-uglify-js-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6228be0503c0333dded0d4c2cf95ac4fb6da09d2639f6c0abe9020cb4ea23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kue42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83445e405b1b03fc0570b702dad90f9a9ef3a449d0d681713ff3ff8e91736e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-sambel65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9721919e2c5eb070442a3b467db43b970e78b122bfd92ac0e3b81bd677567c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137179 Malicious code in surya-wajit82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a8e885e5330d5e457caa937c8c7f3e31a1234c7f2a70eaa9b1696f3916e292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135655 Malicious code in mushy_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d405ec912b6831b9d74c1c9031e8bbb53118a3f110135ce3898be27758cff83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130729 Malicious code in udin-bubursumsum39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1297096f575bf504cd4bd161839abdd6ea5a18b347a2ba3d49fce7fe0904ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-empal76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168f0e2d5edf55757d3313a106ce8966f433a51fc2d9e6ae18e660cd8d7d46f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-tahutek40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727e7096d2093a7641f3cc32d30120bc90d4b069739e7c6cc80c9eb629e257cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_wren_harlequin-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972f44a75589a1da4109f73cfb6c77119cf7317dd2425c1d0f8ec57bdf8ac926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec94ad2f3272447c9aaa2e8f4e98976a5724bd3a5d06ddb22a8095c26894230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-teh63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655e79134765904795348038b476b4c5d8ec9b28389ed0725ac152522fe4a78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c179e2bb209e25887e9ea335a5bf4ba1a96c6f59cb8d133f44065169b0cae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...