Malicious code in wind-quick-char-yaml-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-aldebaran-geodynamo-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c946278b1818415c17fe6f89c3436056cb57fe062c7a16cfab1f2a58b9db68c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-auth0-callisto-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11064afceb6e678c2829e4532c2a26703f08758ccc1c624ce372d6c569a19665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188420 Malicious code in omicron-query-air-cold-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf2ab953418ed4cb1f746b6fb3179574ad14d8670dc1414ab46934e8199dd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186778 Malicious code in epigenetics-dynamo-jsonp-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1342479f24440cb961a5f15859949333ba1dc3e69207d7407aef97806e766e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acseqaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3b99d0469be20c6bdc720009eb1f6e3af13a0940e7a11b3c6aaadc06b61371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184181 Malicious code in modaiv-kvu-ibuab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ba42ad0a76390f74a368e3740557a49fc79ea968a50bfc6869f61192a23d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180560 Malicious code in teate-thy-sonic-jital (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01d2c89e9a2aea7b0487b8012dba19cae7e1a6817cde89f7ed675d809590a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakaoci14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7308c6d632ff6bb7446f8d7d5f43081cb3de2ce0dc0977a31d17a53e3cef9594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mani-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42088cd46f24ef28accbac7ac56ec5c1c5708b60077d65e2431a189fdca04826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8eaf0c026ebbb0b408cea1a964da84a8283fd195f680ebdd4e31195b9d2357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175656 Malicious code in ksaki-kaisoim-olonka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f682d07674a0a30753866c13674ca08038c22ea9203960e41244e53b815e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176776 Malicious code in nuilva-dakdre-ahksogdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb31f035009f7cc1a30978126d8cc43ab4e395ac32bcfe32019214d438ad957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179014 Malicious code in ter-sohyun-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583115e3afdf0952162738f157fb03519406ee45af27d73717fd6322ace012a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175459 Malicious code in kapvino-sovni-gbfffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb9b8ec2d04bb091a8be44f5688afbb5343536e121987a1a3ddf200d4c732f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bd13af1e86c197c291485f6b66ada474a90329e6cf695a9bdc4b76cf6fbad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d38b5d0dead782ccf44819b33dcbf2ca90b70f2a29fdbb153aecc8047a8b489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7483bc55a6eae1afaef0034d308c495e6e72142a6cea427e389b2a35e928dd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf76116487af3c3d2a2fff74573a6e952a20f36e69fc5f81b0e5bb8ca0e1762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...