Malicious code in nabuf-otgaf-doigoaafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cacd89e89e6a4839c034e5e86114f0cb80f42b52683cb830073f49990a98e426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-csrf-cressida-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03b5bb903e9590aaaa21b6b9e954bb7d9b7ff7cd16f69072646e6f56f766945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-celeste-local-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8228a42989ffd77c7f9c333e196535587e34f3b655685ec6cc8609e4d6b53a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-readable-eleventy-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf21e5096610063555185136f2e238daba0c1475c4d10292d1a23e6098811a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-oberon-private-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f3f2cb0806cf61edd320aa4c7424aed2cec173f00e9f069a575bdce405dad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148229 Malicious code in sqlite-iota-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344171a165d0c3e2a68c971568f883679677b8f5082569c0d17202313d2518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-airbnb-query-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8a326112cffbdc78e4226c40385297d39c2cc350524c8450de4b31660a6a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140285 Malicious code in cache-slides-blaze-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c88be71e7482888225f7680add9cd29413792e910587914de99a7bc32af6ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-release-it-delphinus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9723dac1015b770186c13a25fd43bc6378a218746a96c2afb664e0faf6941f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144965 Malicious code in middleware-uninstall-dotenv-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c719f45873e976f68fa0b1aca736a2f137187f56d884006306fe80b62893db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145446 Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145051 Malicious code in miranda-promise-odin-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02962f939958784843b6a0ec0e0006c8a28d63bfb1a39aef4e30c2ef00e89105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146840 Malicious code in pulsar-process-postgres-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c5e2bbe84db3411a75161d881cd19b7ee5d38d0119381a3d89f41921e2bd74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141587 Malicious code in dependencies-upgrade-request-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465f8a5b50c89ad9d8f18c8e6892238427b94313db41734688588131e2951400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137644 Malicious code in utomo-kue5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3ad49c2b098391a9416fe1ee8b6d373ffc57311fe592fa9b2d5891aab43d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-lodeh47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2f9f33a7a7a8437d2a2007ec2bdca700a505549e6fd43ae406fadd503a71cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2ef827607dccbc95973e69f943ab79c96f9d67ef4ff0de6bab22af7f6d336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136134 Malicious code in only_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da662512703584192522551ffd13afb6f0b24598dc369dbc9e3fffe4c308468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lontong92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969197eccd945ba5df78382c951ac464430bf821ff735640a0616c1657f3e11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-kacang4-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bd3b487b8eee7740ce46c68b723a0f5eea269ecf350113f55fb85bc9003c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...