Malicious code in nabuf-otmbian-nuytad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028fd8087bd5cb53d0565a295f8b8103ce95290bd40477f9400dd768de5f689b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-futuaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3d6fa9c21270d1b34115c03ec9e729105856b61f0a8f1d9f67549cf911b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155348 Malicious code in goodmanmax9250-tight-straight (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c913f2e6363e5bb8f9001baca018b1685b2693904bdb438356f76d7b509ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163677 Malicious code in nudalea-fofiri-agobu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187426bf0ab824e46a809378b3b80442496a6f86944b8bc8a786abcc3f6a6953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151132 Malicious code in abel-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f84e84c5b37d961e5a207166c02b7a4a8b9756f9db800913e3b75b53e5e60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168582 Malicious code in tealove-nokire7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163b0a3be2b7df48b88ef444250a38387a0e185921c7fa56af98093c8e477593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160351 Malicious code in messi-tuasd-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8a774f388b908c0b4b8daea3f62568195fc6db104c4fe50e3e8db525b3bd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166898 Malicious code in teagood-lokika34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6823c1d7c661c07549664027808636b412fc3739da6d23af96c2ef3d2ca070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160498 Malicious code in miracle-diook-ujaaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b611a6c5f52dfa98616543a9bbc770ed1136e4170acc94076da11713fd1ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160978 Malicious code in munya-dsasdd-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a065de667f6bbc2e7598f7aedfc8a8b098ccd7d77af609d444e1bd843696e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-tethys-vortex-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e13c39b9392925f5d6ad9cf3dbc8489c406773998529d48a03bb729ae664295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-oberon-dotenv-parse-variables-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349ea019c9a2411a49ded23e230d80740483a2acad4e82584b01da47613be386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-csv-hexo-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e4d05be8e2ad6f4fced8582bc9c7f7ba53cfa26c1b58a82d20866775f2c102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-sagitta-delphinus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d591d1973e0d501c44c5aed9f6e6e63246cb03c6205caaad5d1213a3263e4f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ff2d997a3921a2cfcfc49b398c173f42620dd3ec2c30e47b5b83e91b550b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-procyon-nova-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4634f3def88aa52f773325b3b73a38d6f4d42314962303a0e9dc8a99ed25ce34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-spinner-async-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7ffb45dc2db3ff1f356c7e393e67f1de1d339af5165815c7bc65a9702f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-uninstall-pino-pretty-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012e1dd3b007039777a4a2c814e875e70312f0522f0beeb3372043b2aa4c8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-charon-bellatrix-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d45efaa2137362f3875d3d485c2cbe47b7af8b35490c7f6d3da3eecf4e1be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...