Malicious code in firebase-indus-biogeochemistry-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f7d463efef4ff5f61869e121b0565321a7327a631f0dec3c6b17ce11bace4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greatfilter-greatfilter-kastra-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaa89df8927946010667fcd1917704d7b1e9657c9426eb3b312c527b34c8896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-nconf-aurora-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3becc1558a04e4d28823447dc8ebf2bb654650dee47d902b2c138cf0f0d3ba20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kin-afbauc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2196265320c3dbda5e7d57cd910345766d9b11d01829090b882429b85622278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olika-tabalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d086c1c586538b1ccfe42ba793f79b0dbc0d467933d06316c45a71d2d3a198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-aknkonyunaymhentgdti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fceb9adc0ae446889fcaeccdefa3fd2a02a982245908f0419710bd481f4dfa30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179337 Malicious code in unimna-satgb-naigunbis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2841cef15f952cf7d6bbbf92f16af26b04ad2a96149d44f1f924bdd5f42f26ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173391 Malicious code in buta-fbna-nafifggfoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f292bca541798cfb674f2d3cc15f3f16c790918ad0c93092e5f6d006894b839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171242 Malicious code in galacticgenius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bf571b6fe4c37a7e1e1969c19f8bbbcfdbe1e75e6786cb26ae7dc3a63e0024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigugaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f3b4eea85a51a1a6ff6fda4f9fff32b712be36bc134d5e20bd85902584b6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvauli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5e2abb7af1626fa28b89cc889444e0510971c9ee9f43deb7ed24e5c7f0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ddc29006ad0b8358ea841d4f3740446e99ce935c24e66d81ccd57a4035b6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-amiluai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5917dcf098167f46194e5f74996da43952bd9b7eaa27cf406290ff6407518db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adccd09d66bcac392c0ec5814e8a9be52301a4a1692bb96748cebcdb00a2ad5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368e81425b2b748f1f7c80b24e26f7011313c9352654afc68c967b969b726239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uauafdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39dc4e206f8c760992513e318679f0cecf09e38a6c498bf71a3942107ade9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-malasikiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042ff9f899b668756e2f3ecde17cc15b153a50e1f85f622bfe287483d315f9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mantu-nadas-kagak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077eb32b7ed5b626220919c057b6e478171c4c71a3d3c10b13d6a0c761f9a75c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156989 Malicious code in jeep-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555713a7473a8e49051bbf9c5c790009101ea3d8fd8769f9b1576190ba9abe05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156421 Malicious code in inal-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42203713c9f41e61af64861b64ead384c5b8bf8873aecd3380c42f7ababfa39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...