Malicious code in string-crust-exoplanet-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607e2f5aeee990d1d2e3b76b3468cde2ee84ab17224b598c35f9804f65bcc526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-saturnology-grus-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4961efa46f325d6df30059ba2e89e8339f33108b59167bffb87a28292d67154b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188042 Malicious code in middleware-mini-css-extract-plugin-ignite-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3e82122591102f60da59a1022fd9f2b71682cbab9b037920a755ef505cc80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-commitlint-apollo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f9393dc8a7a4eaa19f6f45d6cfee1f7b390f6d38c9d5c9e9a13032f53e195c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-yaml-fomalhaut-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4735737e1a0a6fbceb2d1dae53f6f19003fd93d086cc37241d439b0b46e27591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189652 Malicious code in standard-thuban-commitlint-config-angular-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a6549fd8e5b7d2d9bdd5f25574202ea00d3f54f001e0e57c00fca175f5c116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-public-grus-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d707947704d8dc980f2972ded93615029de1eb73f432f2ddb7854bc91653c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kuvu-baufbav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056fcd6ade17a0c78b17b92cc5bd7fde37aacc7e355aa349e274087669a8866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-vato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211986fff9ecb0384fabc8c53f6fb4735deab5fc53827ba4d4c64e47fb1913de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174702 Malicious code in hitachi-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc73eec9c506b9aa0ff35e129cc0a2d92be5add5397966b1a60c033ef3567de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaopoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88c37dab832e53b38b27d051b082aefa8e883fe7eb47536c63258e7a66b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175472 Malicious code in keke-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f641bb8f73128c2dfd9f035cf57e0385f1bab539570d5b2fb5d6e98dfd86cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-asfafi-daujuhsiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aa9cbcb589f1bb89c28a98ce39909d76a5f648d2ddf536eefc5015653da5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-mabai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485ae29e4e99688b9d13b3e53b39aee4b57a49730f2c5a7f200ec1222f3c3721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yunik-butd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a1717403564fb17e626b624658a484950157855861fc20941b0480636fb4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177886 Malicious code in polymer-avonnf-abma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2753f32ad9672142f09d8eefc8411a34e4dbd4fecd67e4fd82c00e811e446855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in franciscojunior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7358eafa81cd2fa457dfbb919e1eac4f2f49e29d444c9f9557b3f51f0e4408b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168894 Malicious code in technical-alobiko-taovilanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89bde7de91130274e10d3a6940cd6966c30125ecd519ca57b01dc557c4951200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70809bdb535f2261d9e8428eb9bb778c57023cda81f56b9853ea9d7d694b3955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152829 Malicious code in aril-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07014c2851dccb40940d706d274e4f9012d7daa382856bee88cf59d0788da348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...