Malicious code in csrf-thermochronology-oscillation-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23992ff1d63ebb87f14b33af1af9f888a76886aea879d7893bbf8d971fb1fa92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185402 Malicious code in air-minify-load-secure-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af3ec54197cb7da3f25eb9bd335126dffc771d242e1a8159a7354d5522b5442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-tugafai-imagiuaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec7ffb52586e8d85d9ed70d0d4f919689a02f5ac656a9d5248427a454243623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176858 Malicious code in nuilva-vmiam-bunamab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dd08418eeaad14cae815becb115c3e0973f8799da2d8271da13fd83bd459e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-musast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0eca39f3f5d5439c1e26d425ea03d1949b1b4b6095f366d33b837e5577c0af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150966 Malicious code in @miptaa02/tdisd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9e4547d7b4a329f876d3a879e197a812c99ffa7dae5be034cd90967e281f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163061 Malicious code in nokire-namiresan11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160842026bf01ee11d36662ecce79c2a4972a0a1e6f5bf1e0e3fcf3e4377375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151582 Malicious code in abuh-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d6f8e44d1a68d959a0802ebf0ffece5da4ec196d0f957ac11bca0c4f7aa9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163759 Malicious code in nudela-fofgaf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149d11d07cb42c44c68724b356625f894e19c1785420c8ad147d4d9b5d351132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150082 Malicious code in @mipta1/iyuglk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31e1024c003a1257f877dd0f043ab7f136693e35a48fefdea388993b6c3f6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607ca40db9617286de4a68e351a23476a220b1a8e9bcd8dbae69e454b045cfa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-canopus-kinetic-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d539cc7eb5c8f4faa4c7935908582514a5cabc02edcf4ca728eabe1cba80e500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143879 Malicious code in javascript-indus-ceres-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183d484945bde92944532e2b9af5c200b70e70bcd5879553d78a8deb2da8f18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-lacerta-axios-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff96bb432e59f1814f6243a71d0cfdb66f94102ef9409c18ddc27145e2d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143167 Malicious code in halley-soap-cosmiconfig-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878f47aabf7c8d166e8bf83e6a92ca0f1d56d5ae5dbf7edab11cd99f50c7502d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119230 Malicious code in classic_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca857d6e042050aa2966b9a92dc7dd82645ea818fee8ea4987d8cedfc217140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in territorial_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bea9ca11c5d1db830031d1127c9f322ef96b9c3c30bd4d9bb567a0fcb968686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-telurtahu61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4a4dbe3d62126112925c808c1d031c5ae8d0955f87b31610f512c1e23ba166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103509 Malicious code in hadianto-saguer7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892d39cf8021e4293d5c1c395c83800bab592c6df72b7ca0984c5d4803a078dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa1f817e2540f37f7bd323c07139e0a38c79cb0b0142d03bcc6801ae4ed7e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...