Malicious code in webpack-borealis-paleoceanography-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbf8f7f7c20f0f2447cff594b125306eb9f2baec1daf20a389df5654223f40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187190 Malicious code in good-chi-nu-info-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42b6bf2a01b6334b369bee120683abc5377dbaa3c0215c6a61aa6e01154bdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kidt-avog-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bec58794ce29f7bce039099f117f7acb61a0a23eec6ed0e5641b94add8afd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178082 Malicious code in polymer-reyta-biuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e994fc75adf0456546fa621207c12c83f50334af839d49ff68c1f2e2d3dab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177400 Malicious code in poglymer-ogmih-avigafdoag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cabb42f8b02cc65f54fdb9b85e98bab1c4fc31e08f08e8e881c1a878a503ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175080 Malicious code in kapino-samunvu-udvdabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cd263bd877b79059636cc5b21811273cbebcae82f27b20e34fd17f7aef26ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176058 Malicious code in miftah-miftah13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a177a268be549d58b8e13b48e41d765fa93e429cb8dbe2a74fa76ac0148d336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176374 Malicious code in nokire-kushina50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c839310308c94dd9aec8241a25e1a05a711d12095f468b2445d0ca19beff9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobiple-amaikhora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6c70e64e4359c419425e8e9ad6b727f4c690d6209a450466a457f5b77dd59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156690 Malicious code in inufgi-gotmua-anabzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe487d911282e37bb82cc6497ac3817d1044cdd34d35f7a6f4210056d3c577d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155794 Malicious code in huda-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64fd1c2bbf94e134bc63c2d95152d407c280a9a6840126c011ae7c84c4738c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163812 Malicious code in nudela-ofgfaf-gajafhhagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4a8025659d4944804f97437924453b9f5e47d338963325c0843e6a23833696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-run-script-norma-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dd668333dd4330da852b8a90a702cf0b38e7a8f807dd442277790b997ee2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-puppeteer-janus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a71e3a54f79672239492abce3e49d32a7cba8825e348aef96f06b7869ba5a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133601 Malicious code in front_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ca3c48dbf58152b560739836dd31f8d5d3d78ea51f0798e756fbb9e79d54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136172 Malicious code in passive_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc27191c5b251d889bf8c0a82780a1378f78faf5cbb93efc9622b6d2e30875c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125106 Malicious code in bayu-getas9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97036a32af2dff9217a2b1992cb55d08fec31cf987d9355cbb3c509efba531a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120428 Malicious code in hadi-peyek28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d598036f348388d46e0c747f089793afee1f9ff6572e21e957ead9ed217828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112482 Malicious code in xerothermic_yak_coffee-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8802218039aaf63d918289d22b924dc52766b15f2f407e4dd7ce9d465438486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...