Malicious code in hot-float-moon-unix-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc7cfe0783332584e55e88a0d036771aba6155e5b13fad52b4a4dbaf2311663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troposphere-comet-changelog-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b74ff548784ce3a86f53316b5de4200f29c883e33f658fd92f1e8e6322c765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5781cb97c128d53f47b88a2a1db6c165013590ad6242879520a3b59df97f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174041 Malicious code in divata-tuag-ivioaabga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94115146da8f64f08a053ccc3bc28d2406e0e60848c6fb37f4c4d21c8745e6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce31f2939cfe7c3f34967014da0bc639f9a027d0095a7456963e4f443445734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167202 Malicious code in teagood-nakama38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0806f5fe0f5c6f35c4c73e2dc44d08e6becb943c7337c7c92b0aa779837d6628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147639 Malicious code in sails-concurrently-css-minimizer-webpack-plugin-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4e5cc17b6921b4f1627fafef4b139df5cac2b0f07cd37d26c90b68ab19bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-init-protractor-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032e8238a6375ae58cc650383f15b3bf4e597ee8fa88e72398c702acbd328810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-dorado-arcturus-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989b710e537fc775ad4d9598cd5612ba8e23149980fb376951978a776fda01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132899 Malicious code in dono-kupat18-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a5b848e911f4a5020b013abca9517cfe70cf1eab7197fa422c106cb0b43d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e95997fb70c21d0762162b39922d4a4de7b7802b069298d189a90565dc9eb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127135 Malicious code in hanafi-tempe26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c299e8c92435286578bfc81a21ec935f4b37030dccc728e283d4432b82f8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious_jackal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51830629634aeddc6eec4a544b7f2d92379b857e58794fdad62356a13864ddd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110460 Malicious code in vicarious_starfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56c932f7f9e8c8b81c84f95bd4f748825036333aadd701630cae81abeb48e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-nasipecel78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdf656868112c1abb4fda6c35d1654e60cb20e81a43ebce58913fdd8f356522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97350 Malicious code in wet-amethyst-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5041432e3fa822456d26732ceb44fde687a1e7548ff2ace4a4bd86160e796c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94236 Malicious code in empirical_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa73eb21e0afbc86d7a2101efa22a7369a61e6b9827a02871e13c78b07e499cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-bubur32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287f78014616c512535716e63847b310e5eb24d17429b7257eb925a61e58f4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90232 Malicious code in rough_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02261aeaea309d58ce99145f1925e1b671d9d734b4603ef4a1443a6832d48131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52810 Malicious code in hadi-mangut68-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0791da68e4d18fa5a757fe6ced031dad6d07b30442b7ec771a610f30acc63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...