Malicious code in relay-dagda-sync-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e2fa9140c056d951512eeda4b917c4d77a95617f974d632aeae2f8e5465c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190159 Malicious code in virgo-joviology-proxima-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fb535baf3318b23fa0b62b4cd4c5683c8431b361755d1cb4e8290c76a46c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gisosag1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8edf37042276315bcc3457364404f2a39148110cdaf2ffc712af76ed75042b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uyaidoagbajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde5b8e4169141f47119d2245393d028463482227c81b29f0999e27d44ab0712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c58e6b8d7b2258a5fe08e0ebf3fb941f2bfe67648d4b171acbf7d0e68400ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2ac3939c180c79f3be22e23225f889589d20568284f12f6bf936614e54b655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151627 Malicious code in abuyilani-nikama-luyabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afe812a1f01c1c7dd46de06a4606c11ec712eec4209a6d25b3a0101be3e579d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167180 Malicious code in teagood-nakama17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606240b216754863ae5967b2d967f99c1fb259c9b828afc7debe6dbaa1045c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166533 Malicious code in syahlan-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca1810855f6ff0be7eedd9ab5f40bc1ca3b86429e31d927154d49bb36065d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-vuepress-html-webpack-plugin-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2432237f1723a37335764ec0a92fa5b96656aaf81ad501680076a8e1b4d646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7777d64a1343f42e8f80d8f8f3cde9e71dd74d38f9850534c9214756d79df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-odin-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807f19146fb1323fc3397526aec5abed6b4f21c91a207e554c5fe63341877ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-eslint-plugin-postcss-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0531401803a4a5dc24d00495ddce8dbcfa848942851ec09e9616e99dce22824c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145078 Malicious code in mocha-graphql-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863ae61cac71de360191dd6072306001b2bb6392cf8b16e63c7085e2d018ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144949 Malicious code in middleware-blitz-mutation-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f55a3d1837c6187591f05ff77aecde65c5efc3ddac721b99369b3e052d02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143180 Malicious code in hapi-cordelia-nightwatch-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13468034b470d0d147c580c9399b008752ad04b2ce9f400acd324b01b03c9a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147064 Malicious code in react-bootstrap-loopback-acamar-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2204866b46af08416e01189305d8a67fe4cf159732b41f5e52e84a51b67bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e857a1cecd6ea55ce0842239be47477e15f1acc6ce651f2c1722e6b6f0fe6147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120998 Malicious code in jaja-ongol-ongol31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf1620c8e00ccde837e3b2df8ded4cbe382c756e2805cef08d93cfaafd95fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...