Malicious code in teagood-yakuza78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d38b5d0dead782ccf44819b33dcbf2ca90b70f2a29fdbb153aecc8047a8b489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-pigafofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de9b9346beeee278c398c618e30f0a39ff6f3d62f634b507da3248e17b7aaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161502 Malicious code in nabuf-otin-agogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3567e2696f239132482466e8a7b22da1fa94b3b5998c119a32a16674d68c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7483bc55a6eae1afaef0034d308c495e6e72142a6cea427e389b2a35e928dd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161282 Malicious code in nabila-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f847149e62b6a9241b3c3089d9d0bcfe3b8409414e029212de54d76283d137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164600 Malicious code in ramadan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bf0fe0f9564a7509a33d677add3854e3a148d41b897f1fb5ebfca21b8cd090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141872 Malicious code in elara-cypress-pyxis-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789466b2503e28d7ee4f9a1277f3037f1728405fc3f42bcc6217fbe20ab779e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140549 Malicious code in centaurus-publish-zenith-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b42f820c0ea6732615b43ddbc116a85e824344228b7a591b646ca95d8788909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-spectron-webdriver-subscription-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bbcc0430e599d601acbf2f5ccd63513ba9fa4fcaeb3ab76b6221416d6c2a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-puppeteer-orbit-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb39e2620d3390231bb1f11d856b5d83153e0517c509f97d497defe7de83a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-nodejs-upgrade-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a287064aebd8dc02a43ccaea9def800416fdf41787c254c715a4c63df047f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141192 Malicious code in cosmiconfig-playwright-geckodriver-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e69aa1a9f0729ec350a6b2c8b90f2cb561c83d2a0637be9da2edbcb9eebb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146462 Malicious code in prettier-cordelia-soap-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34db0d66276bb8d90455f75773ed99baf3815e2d4b00e53033c7a4c971e357c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148896 Malicious code in ultra-graphql-xo-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7fe9788fc5f85a480b8336fcd4cf110708d0c9494d6b9eb531def9a0c2053f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-deimos-hugo-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927c90423c37a0e1916c96ebc222fef6f8943fb8899be71e305d6cc4bfcc9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-xerxes-repository-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-iota-version-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd24e03634d1bb12d9b82ed857475bc589f4c6518d21d8e2ba9714281b6134d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147618 Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...