Malicious code in freertc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fb3d1337fc97d6eaccde325dc5f539a28af051f548c31f1b97a8752b8f51878 On install, scripts/postinstall-message.mjs reads the consumer project's package.json via process.env.INITCWD, and if freertc appears in...

Malicious code in vulcan-graphql-sadr-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fd7869c1e84447ed5bb31e1a38bd35e970545d9af54c68a3ce47e58301765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a00163359df21b0bda8d8c9d1f111304fab101f61f1023c48da23fbac1824b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b252746e7d611b72dc0df8411ad96c147cebb57106edee24a5c38335c1c506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2821133ba87c1e8e0d0f55000ca149956362ffb910ad2dba822df06311cca488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186eb4cb57da5e9bb2dbf713c49db883624fa23c04b3dc536eaa0a371ed328b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd351abe677a02470f35b8a15a8119381e2eee640cd8773a09abb98b234b588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_shrew-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82caa12d343e58f07d01f3f6b2cf2ad33d773b6cad45a207efa7be8cf6abd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb16138f098b0327e2dde55ccb4e2d3be3ca53599820dfcba59aaa98e8f5fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102321 Malicious code in exceptional_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dbeda4e789815564a67ed76203a6f60a99e4e28f327864007f2005501d36ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90e9e1342e85c9adec7c88d2cfcc29ba6fb47760bd8016c37c585468ea7ed4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 535551eb2fc4984b1a0985f5667c7545d2cb5d89317372f61deb312962f4424c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4082b7138839a0fddc6b3f05c99e8d095ade7959428984f5ec0b0dfde6257d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disturbed_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c43854a0737c3dca15c8d087436f2dd6cc87c1b4d7bd9ae9a65ee4567a991e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f906679631161af6c12d127feb521d3f739ca249dfef0797288a09187137ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09731b4795cfb890b18180946754e2fc9c3c712443a289e3f2180220eb26150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af11d5be4114863d756da68f3e24657fa8e5a9140d6aba605ec0ae46ce4083b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84318 Malicious code in damaged_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccb46c94f410b1e8203755bd2058aca91c86af61c8e51d236c689f3e386849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82998 Malicious code in aggregate_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb6e15fa4bd5caa05cd3516f1819e67e5b04e8404d061498b232ca032c6770f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a664b1e07adbbbb2536f368bcc38cdd88e09f89f519e2583ec5c4632e966502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...