Malicious code in ignite-rehype-xo-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a51f0740e1612c51322e453536c8292d2bc79861076bc5c2b152821856564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176192 Malicious code in mufabafgi-sufafi-caaufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab617454e40cb9dd489ce6195e3331d70cc40b3b149805fc5d05a17bdcbf3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b12e0353c952f8dbe6bbf67fbc73de5dbc3d0f093ddfde7c1d108012f528919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cb372b3bf333937813643ca9da6a2c6ba740d09ebd60f8539a6ab5d4c38dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticul-busa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3176226dda27cbec802cc638674e2e89025054777bfc9dc90d65aaf6d4eb7297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec95b743656ea1984d720404620855e9cdcb7c870a0a8ab7a01bc0d7a390b828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c9519e0bb5761f668cff73dd36e1360e4d7ec9c90f9fe7f8e173bfcd1c86b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotma-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d982c6de76de87e1adf14f6069dbc6ec6e69c64f7047c7478b50e12f0ca7736d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152563 Malicious code in alvito-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4402fc920da45dca32a37c3d2a8c02cb8390fd18cd02c765b1760b932971b6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161480 Malicious code in nabuf-otimon-g0g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105201031437201e644ad256255e24e36c3d96899cc640492aa327d012ce6073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-typeorm-public-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe46e17bb922cf6b54c730f90d58ae9d373c147fc77bc4648addb1455e4fa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precise-lime-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b505d68365aa0468e5dd6d13ddd91a058cea2f92664b66344bab4d240ccb57ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136390 Malicious code in putri-ketan45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf1dbf898feac49bd87d78be56b1c96c19985ab1631bf72e8c99b6f860e297d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130958 Malicious code in vast_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f64f71b4817a58df31aba560c48bf91331dabc000509d2f212258b1e7dbc112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sasag86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7477a98fd3bee2d0102ee4cba9b7406aa10b2a491d67128ab8ab89a5c3edaedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-nasi91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b951c9633c64fd3cf13d0f6398f2df056a57873b4ce46e9db675d05fa2e882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-rangginang94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa6b62bd3c85c81edd146c7effb2394597875872787f8289f0dfa8859930c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4224edff97aae510af51e8e7b025dde29b9752fb701ecab3278fa7d65909474c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_planarian_apricot-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd41f0c6b7ba7271710da4a90524b78a8bf0c51a63c572b7083b13d93c2585f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_octopus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3592267c6401f41bbaf0af90a29ee554affe6c811a4cdd6ddad8e5d87ac3861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...