Malicious code in route-await-root-monitor-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fb642731ee8fc87309e75918ade51ddd54aab1fb69f028bd0f8a5656b0cf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180520 Malicious code in teate-thy-sonic-iralu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0165a3b5055f17ebfd3e9e05a0e761c6d85798f751477e87bd3ec31a64f8bde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164525 Malicious code in prayoga-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defdced9386d2c9b85d911ded727103cee918b553c45500871f879d06e2c0617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-21-re2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f10798ca54546bde1805c7566ff214c575d1b5a13fc2d3154f73b32d16f7167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155725 Malicious code in hariyono-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385675710dde9d5a43a1a5432a83a27dab52db2d7b97be6468bb2ef0c85aafe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-hugo-vega-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c502d4249c975a4bab93ef877ebd30cc2c9b3b46eb73351f5d2bf350f758b9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-io-quasar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463aa37c4b880fa305a254100385206be26e5f5ddb3ee65314eb015fdfac0cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144169 Malicious code in kinetic-elektra-oauth-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c22228b96f1f94b44857105013958740ba11c801df19863786af40a7b2b19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145737 Malicious code in oauth-writable-aurora-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f2a474d3e4a74eab03cf604f088784cff2d8d6ca11d9e9518f1abb8775970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-gandul58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1b76e215eb4ba31ae89aabd2c03648627ce904ca465522134c217506c69cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-nasi27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4d8f3fd85cc3019c4875758243a3cd15e8695dd2945abcf0623279de877a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126071 Malicious code in eko-getuk65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1b82fdf848f8d3ad7118d7d780deda394482042d492f1f8bb9f98d492eae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tomat66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d355684effd02930dcc1631fac9369a5d481e638e181b5173ac37c39a5f6d783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110568 Malicious code in visible_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e62af11579e8215d51d2c09b020ec07e13c8ee7b5316763a1f98bfe20250123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96668 Malicious code in solid_moose_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ccf7df9813e94b44ca221c617abacfba815897a04198364fba21b87e63b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93147 Malicious code in advanced_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a81cfdc97fd817d26053056661d1e71646d4af625d279a29d8c9ee87395f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tempe59-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a53ad3988175a57fd56f3aa3c9cfedc07f08f4407b465ddbd42eddbb362f7b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77985 Malicious code in erwin-ongol-ongol45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e1dc4c6fa20622133d65ead3748d42f8e15a1ad35a636d75f0b3a3c875bf85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-silver-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b800e0089ac637c60c63a4b72b42ee399be8c336b078830d65b4708b81c7dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amethyst-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3e38ec60386ac0affb0bc8f16e477e54815b2c19f87e8c29dc4cd00a44ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...