Malicious code in nabuf-otmbian-nuyfidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fbed7a23c90b28aa9b5a0ccb34de97951c935d66a70617494073ae47bb6adb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-gvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8dfaa9e13485562114eee2d3f153bec3bb4b3814012c3aad88ab9932267df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4db1db84c53c3fed2c2f2abf0556a4b9bd1187d16f9cc49c101eb88760fae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f04beee4e50e18a2d09d69a5ae428ccd16904f810620cca8bf5541b9e1d71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155094 Malicious code in finish-sf-maewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc96e573187cbf4f15f2c724843744a270899eae155f8a3590a45efe3e14c553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169283 Malicious code in trevora-cir84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be86b6673227fb62c0ed499ba1843891ccc8c1d52097def5848bc77f9d8448b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164749 Malicious code in rino-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7a7ef108ef5693025803ed428c5871af506905f0da56f11cd95bc008b63904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168250 Malicious code in tealove-dana42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e0451a8dbcf79f9540e001b0513efe485f69a787e366cbb9797e277c41d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153803 Malicious code in bitha-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2118a02700f11ae5ae19b93c46d65ab2fa2124bab75b22bbae41165b40a4dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-materialize-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed6bade7d741e881a1ad5db1fc1aee5b73c774ecea26fd42ad6d9811499188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148651 Malicious code in thuban-ganymede-sirius-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e9ae9e62a1196b1a4ae777bc6ae0a4cd8e3f48f279f852f8802edfd651784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-element-ui-leda-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7de7e8e01d9dd88a42b0afa84e8202c4c0324c2cfe9e0c31edb174eb92d91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142931 Malicious code in global-dotenv-safe-mysql-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c214ccb52c4d406e705a660e00408acf6f13309f35035e2ce944ca6a57c77a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149688 Malicious code in xenos-repository-non-blocking-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57351d857a5ef45fe7a7fc3b1ed7e68979fcadd41772760fad62f6d92ea5cfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146281 Malicious code in playwright-fornax-enif-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91a879071e13ae5f0848d6bd342f7f9dbd34ab7b15720262875b6ed4438c25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148675 Malicious code in titan-child-process-colors-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fb75103e307e237f68dba3740fb8ce1abeac8222169c1b09e1b817334b60ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140176 Malicious code in buffer-update-puppeteer-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5463711dac655828a2734f0815568ba460f52891e78f95e73fc8bd7bb233b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying-harlequin-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0efc01ffd237e30ebc8d6127cd738b563f653d3dafc2d41d0dbb803d7037bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sambalado68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a155d9d5d3730b7070f2fa9b6bc1ece3a348140858900f899edacf6082d843af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137021 Malicious code in siska-rojak67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb38049391ded9ca575233e5472da89f4953cd6b233350cbab35d4f3fbbcece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...