Malicious code in promise-aether-private-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e995c1fb742ffaa236c62457efe3e86f89afb596a418f5b4fec72fee723daec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-webdriver-mocha-testcafe-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97be0264b0bb5094af68aea6b2b3948642428c9ca9efd84ddf15d7ab02acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147163 Malicious code in rehype-auth0-superagent-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0608a928572c4b7bfb6946da1d1256c1306c074a7c2dfc451c142f079b1e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145297 Malicious code in native-venus-kastra-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af819cc7c6039a99830cec4ec922f20689dda1cdf403e00756c32a48533001a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142790 Malicious code in galaxy-karma-restart-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64caec3afd9589b18de53d7cb1fa655578c4d3baa58c69faf1441ec3b4cf0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148919 Malicious code in umbra-fomalhaut-cypress-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e610ac0879d7d61e6f41f0587dd9f753775a9d82956e80f4a8a486ae1f56d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143334 Malicious code in hermes-xml-auth0-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c611aff8a4e335a1a4820c2a72eac66c8e27637a83e7aa8e9fa29618dfaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-bronze-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16146e4d4857e60713ef61c9a814a154e55f4841549b6a218394b458f93f4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138785 Malicious code in hurt-teal-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f124b2b9ae4a334e270a929e075ffe74689941d78356cfb0a02d6c2b73f918a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-gepuk59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbbdc7e24dcc454b886801e60e1fdecc073ab5b7a15139c7245cb714da805fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tiwul82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad2b2d41bb24ccf6bdb533689672298df00b70b8fd03997a0d9b2e0842680cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-asinan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05dac6af62c60859048f1c8f351d524b6fb2c9e5ab5b1e5a8bf9f2cc9ac2f422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-sasag3-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aca58b6ec9bef74eb8e349d4c4df616bbaa8b1580e7982985f272b9fba0a4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-oblok39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa9a9bf912095b7a5f458e8d73e3d84f439458dd77143e44bf09ba828736308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-botok99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52386f171bc7d556ecc0f9cd4b456c40b1db275e71734c15f21b1d2e13f97cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kacang22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa3430a55d3c5f027fe863c5159a523ab5062fd52e434241c01a36d95be29cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-gaplek40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226ed213fe8a3102e2cbcfa3824224bee5776fcf886ba0aadc0f930ea9e305e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138470 Malicious code in zaki-kupat54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae42940136984a28dd563ef6a210642790c7131b9854b486573f98126e43947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...