Malicious code in sagitta-tachyon-rocket-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87105f7a55705922e8228e6ee258afe22d3eafa3dd23c68fa837dfbbac199b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in speleology-unuk-hydrogeology-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c4c49a2a50b6d2d44be0544067e69a2c0491f3559fe4c81e776971e31c8737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186265 Malicious code in concurrently-configstore-lyra-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdd3e3fbd31161db4d4c071bc50e19eb1af1064e748a5e2f0131d7ff033d0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-auioaial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78a1096680d8a536dc5021b61cb1c3eb3b460ea7de669afeb4ec3337ce8e242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f069d97a567c8f076c2212a2bf2e4c39b413727756dc3382f47df240ca7c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5145924704244854388ea82f48bdda1b9560350b417c351bca00f4c0d43ab8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150962 Malicious code in @miptaa02/taisp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487f0052fbfd05b7b39e4ebad96403f5bea973cc7b6d69ee6b4f317d539b008b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163642 Malicious code in nokire-zenitsu52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b999f1137b060662eef51888d173af26b8982e1b9684b86e97db0453e4f7fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-slidev-luna-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd3f94ac4f1f9ffbfd360578688007afffe72b4e251a09579a1ce567d746749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147726 Malicious code in scripts-build-ganymede-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca854d6df3b48be4282c2ab22c37905502a03ba15db1d06cb12e79768d8d2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139933 Malicious code in bellatrix-cz-conventional-changelog-firebase-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adea7e961cad3c42a45809df4c91724c86fb260d0a3f89b21880d783a5a939e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controlled_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca042adf7e7cd3f89f47c957fbc44a5ad4a24007ebcab6cd8cd9182c0f8ece3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-nasisayur36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5e5c8470fef4db83996fc2bdf8c32b429b6da71071ceccf815a487c9cfd919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-gado-gado27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b36f6799532ee81a022c55d43bb9c9463d6fa02dfb28028f33481b5d7301f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-telur51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0ee59e0c454f1c5480df00fdde14c06ccc3a78f236a3b2db474697dd6cadda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-kemplang47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b1a443a2057e927f6f65f9a630956d423fe1ef87a78331e68724f071efc8e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103729 Malicious code in hissing_swallow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e4d033ed5cfe4266026f0b10ca51615fb7d12fe024ebe8fb119d743661372c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107222 Malicious code in prepared_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197d376422c9366353bba1ee5c2d804c33794dc4489a1dbadbc430e90c0e33ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in powerful_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906efac98b70cd8f03b120fd3e4e3e4190383a717390b0deb3048be1a91cbaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-martabak41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c053a7ed410068c6a9e3c19aa254a89e566f19bf37baaad9d90ad92b08ef53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...