Malicious code in riyanto-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3ff745a5cce33f4e3467eab35f48bed3165f8bcd6c6bb5e6c7f006a81e5507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1747b3e4ff61af9fe5be7ac0e16e86d18b1fcff80d0fc0c017b761b94eb9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b30f866ec8d30fc4757097f46c8fc4269fc91a8692ab420b088663e951791a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a461eb65fd7d7eaaced60d54cf48d4df3a7d4abedb537c2a89a1f2af72be8009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168491 Malicious code in tealove-nice14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c91359d00d8452be7cdb604cfa9e82156eb03e40392b6ff02bdc1f4b51a689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170417 Malicious code in verify-ayisali-ganis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d0832590813ebd362a77d59e833f0a76d05a6bebfcc3a6ff1e330676b11d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151856 Malicious code in aiboa-molipe-aramia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6514fcf87f3d40d0b43ace4f8b1a2925e43b88f5552aaaebabbe780bd06b13e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165352 Malicious code in sabua-muhay-taum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1dc4d50d5470bc8474db2c84d5fc96d6a8f76639530f3f405b36c7b3984307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166557 Malicious code in syahlan-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28a9c327eeca8aeb99a6db2bc281e80e4b803fa081823861ee8f2594a22495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-janus-socketio-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e00c3b387e0d4c24f5c5bbfa1bb719d4839b704ca295d7767ad124b27dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-antd-babel-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0b97c319bc0fab324346fa6235b482369da554c688d9c1557de6fd77eabf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-backend-hyperion-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d599aba9fe19b87f3943393ecd230d276051184bf752cc0349302bd40a0357b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-algol-jwt-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfd639c290016964d28a4e4d3975f56f9bde2c430129df5be23d9169a6700be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-prompts-xenos-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee820c35d475c176e55f15d2ab1c6e6291ac53809a568f4ce77a90c5700fd41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-elektra-build-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec8ece53180670f01716145c00b47d9987080d41885ae0c91d2bae340e797ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-apollo-oauth-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b3417cb0939af2d7ef1ffe7ef71b3fc5def7e905d096c43f0169cd5108118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141871 Malicious code in elara-css-loader-tool-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcfdab25bdd37fdc86ad0a8ca819d6a524ddae94fca9e2727215f631b725a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140192 Malicious code in build-socketio-enif-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad3112923e340d924bbe9b609468fbed79b3805c41fd9f6c46d9810c00ae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149121 Malicious code in venus-reveal-md-chariklo-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcade5cf30b3a0402a16ed5fe6a8901df4d3127ad009edaec8965926104d55dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...