Malicious code in manadsi-sfdada-mva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7483bc55a6eae1afaef0034d308c495e6e72142a6cea427e389b2a35e928dd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf76116487af3c3d2a2fff74573a6e952a20f36e69fc5f81b0e5bb8ca0e1762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d38b5d0dead782ccf44819b33dcbf2ca90b70f2a29fdbb153aecc8047a8b489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161502 Malicious code in nabuf-otin-agogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3567e2696f239132482466e8a7b22da1fa94b3b5998c119a32a16674d68c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164600 Malicious code in ramadan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bf0fe0f9564a7509a33d677add3854e3a148d41b897f1fb5ebfca21b8cd090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161282 Malicious code in nabila-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f847149e62b6a9241b3c3089d9d0bcfe3b8409414e029212de54d76283d137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-xerxes-repository-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-spectron-webdriver-subscription-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bbcc0430e599d601acbf2f5ccd63513ba9fa4fcaeb3ab76b6221416d6c2a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-puppeteer-orbit-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb39e2620d3390231bb1f11d856b5d83153e0517c509f97d497defe7de83a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141192 Malicious code in cosmiconfig-playwright-geckodriver-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e69aa1a9f0729ec350a6b2c8b90f2cb561c83d2a0637be9da2edbcb9eebb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147618 Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-deimos-hugo-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927c90423c37a0e1916c96ebc222fef6f8943fb8899be71e305d6cc4bfcc9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140549 Malicious code in centaurus-publish-zenith-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b42f820c0ea6732615b43ddbc116a85e824344228b7a591b646ca95d8788909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-nodejs-upgrade-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a287064aebd8dc02a43ccaea9def800416fdf41787c254c715a4c63df047f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146462 Malicious code in prettier-cordelia-soap-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34db0d66276bb8d90455f75773ed99baf3815e2d4b00e53033c7a4c971e357c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-iota-version-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd24e03634d1bb12d9b82ed857475bc589f4c6518d21d8e2ba9714281b6134d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141872 Malicious code in elara-cypress-pyxis-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789466b2503e28d7ee4f9a1277f3037f1728405fc3f42bcc6217fbe20ab779e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...