Malicious code in rinto-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491cff21f8ce0311879a1be5c12447043e7cad8dbdd82b08d85e56e2c94cb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafagaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ab883701dcaa6f7b6f471c9c7fa957d0a2b62c68a1cea47609663b07236570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-muaifopaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6415eae915a8b8acd3cd398f012ec55d27b27c8f9eb4b23571fe98a784b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151657 Malicious code in abyikula-nionai-lausukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccb71f6fd335e58f1618de6ae019fba0595b0e3ec54ee6562ba6c9446c68877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157417 Malicious code in kapafovgiaanggapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20667d2f5e0efd514d3285d4ce86b985bd703b5c5c38cf474c40ae6a595227ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159509 Malicious code in manaf-asin-nabsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de26b760fdeeae2980b3bf9064790525924d3f0136dc8f47cf409484d4aca234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159927 Malicious code in manttu-muape-butda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e6dc59efeeeb2b34fd62fb089ba105a7231b8e6b3d151d44752388e35f2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163165 Malicious code in nokire-nana14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211cdcc12a112f3730e87dd2a165201b3c68fac545e8ec1787227a852046ac5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165418 Malicious code in sabua-muuyfafu-daufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a645a78b67fa4876006066adde83b28f17a472cd35761441ba9d595fc624ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-eclipse-supervisor-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebb5dce4cc6bedeb72dcfda54697e0c1ee9e4ab70e6f7c8640d9a4aed1b1e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-optimize-css-assets-webpack-plugin-vortex-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdaf001656f0e8395e386cb55cbb4a6a0e6fbc5feece1f143c58a49d9e4aa760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-test-cressida-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f88a96a3af72b496234c0c4c6208f7411c56f0edceabe35a5af110a4566b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141121 Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141830 Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142696 Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141760 Malicious code in dotenv-safe-mini-css-extract-plugin-pm2-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74de89f741715d26b3fb5345a112775c3f2ffe590c13e624675d8781f49518a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147058 Malicious code in react-bootstrap-envconfig-juno-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3b146043bb3e56c6b2f0c6cbfd5dc3564919bd1004bdf4292a5db2e8fa8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144865 Malicious code in mensa-tethys-local-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2701a23daa25c07ca722a238b8a79644ea9150a243c248fffb23841bbcf42f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...