Malicious code in sonic-kaos-fgahigyafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b52c6317f7953c45a76038c13e0dfd21c257005672d2dc0a6dba68b9eb4977b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-ari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1281ccdd5168ca626353bd7f5bd6eb6f7a9e9332a328c43b79f4411267e354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a262821b8f1c29dc0dc9b4c654b428d86ee099bcad72a96430e2765ed3cf815c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160745 Malicious code in muda-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b4bb2ee295bc81fe93f3e55db93bf972730098e6897807d9a7d1d6c1831d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-celeste-jupiter-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c205fa2d6d2d6c34d73678744fd7def89ad1b39c74fa0b3b2b31c6ac339b42e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-andromeda-dione-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab59a545a758f3f8ded31ec284cb9f47a3b3ca66dc254eb9f6cdd08d4c65ccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b67d0947219d9c28f83df53a00911736d07bef071c3af1c08d8adc6e483569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113705 Malicious code in erwin-getuk70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b341bec36d7dbf3fe81efa775385a414790b804de36ad01990cf5c6626d550e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_shark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b838c9abb2d5191e27008b985d1f250a5b3654a25c1299225b3296f664a810c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100548 Malicious code in citra-rojak18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f2779c502dd4627890ada1ae1a88c557cdf158d56e00a795570ba94256f77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87545 Malicious code in kurnia-sroto21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f1fafe3b081401452b3514a11388327651f4d2f6338276e24362c734cf934e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74308 Malicious code in mahesa-sate82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11b33d7c32a7ef69588326218b9aede461221b9016afe4500d60bae094456d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-coral-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a5211ffbab9b2bba7dbaeb7594cb6e5834f8aa951788ce64d1c4f8b5b57d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64224 Malicious code in maman-mendut35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3142b0b2e0f5292fea31994ebe0c04c5c7d5994c90824e105dabde46f504870a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kue4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d314efccb224bd0c2ae846a6451766b8fed99de98fa624bbd89db7bfc6722a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...