Malicious code in yaml-root-xml-process-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa0f9574427b5738faba6baaace11a9da2f9b5a5f3797f4432fe01c3bdfead6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185381 Malicious code in achernar-oberon-lint-staged-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fbe5fbc07c10352f1d16b4b7e9d07886575f92405b0512a75a06a0655b6367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e85ed465c209fa476f5abc20247074bfd8d2293719aa659ce09358eb3c661af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182163 Malicious code in gociay-ung-fug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c6b9d42e2d022cfa4f320d57561bfbe1c92972db32eaa526d07e1e03b2d197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aaaku-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae659de349f0cc8b95ce40c27ebf4d8c6d4f613ef55ef14182cf3b4f701da4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175121 Malicious code in kapo-samu-maifamva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa1ddea2946ba77ae6fff301aa1ee705ae2b08079466827c8bdca218c0eb8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167455 Malicious code in teagood-nalikami54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2ee92b10489818b0c7f0d08861fb4ecfe9413a7fd52353b0cf3186b01c3511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f721dbe27ec1ad43bd04fd1a1e2e326fd07f90f8abd33c92fc1d89acc79664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169222 Malicious code in trevora-cir29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d82568bb4aa274be85109d73fbc528ac181e0c3f88362e0c76085513a72a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159771 Malicious code in mansila-taila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b8f24d989798f4fbd9ced8182b0ce214ddcb3bd1ffb38d5fff182f3b93ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152022 Malicious code in air-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099f2885f535fcbf8b77727dc630668f0e8d62153aa7a2e07c9ec1bc46d3cefa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163647 Malicious code in nokirne-asaka15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094abbc8cca5ca06de7170df07abf032cf975930c6b5d989ac9774e4e74d4c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-meissa-avior-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c513e991ec788a17f2ba39aa0325f26887acfdc59ef2bcb2ec53334ceef97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-ganymede-norma-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383622fc4616a1973794983f9948fc69040a14e146f63c10bd1309edfb61567a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148224 Malicious code in sqlite-cosmiconfig-passport-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac3c4fb6f1851d954cfaae38164bfeb87249be82f97d7e6ba1552473a461f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148312 Malicious code in stream-chalk-elara-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e8742ef7707e771c8ceaf7750f9e26d84d6f5e2fa92e9bf32fdaa0178bef63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145419 Malicious code in nextjs-nestjs-html-webpack-plugin-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7059d1a15f426a74fcf592bc2bb475317c6e5b874976cc1a75139833e60e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142806 Malicious code in ganymede-kronos-oauth-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc815bc9ad378013849b00f6447853f5648e448a02cd211beacbeb2bc05de3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147612 Malicious code in sagitta-publish-npm-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c7fc955c277c3de9a6cc9a4bbef4982f2f62079dcec8f17b305ed1db8ba22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a733281dc07bca20b9253f34e8a9761951634fd49de57aa4d6ace582c6f189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...