Malicious code in sonic-kuig-tav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec57f0a03f529777fa6a6bce7577e812f2dbedb645fc2bcda781aae92a56ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-fudvitifayaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b2b0f61bf024128737dcbbe42e099d5be6e31d7ec8a43cf8316f8ef85b1114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177519 Malicious code in poglymer-ognboagah-agsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8868f64af406794bee17dc8462da1ceb94f4ae8d4c2d9a4df9fbfff9ea95e22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogih-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb28993cccb850bcf6313dfac8842d120469c9610183e7af5cbfb8164b306ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manic-tauwarana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9497bc593843c62826db8f4ccbc64580e33f24d092f0f60f9e0ca79e1ceb2933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03d72b26ff1b3f023d3f4379d2bccdb8d27e8d8c22a0ae59e47e655b216e658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lki-kopanaiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd2ac60ae01ba287554c96f8274350325c4cdb518f289287f1eae392096651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a84698f6b4b2a737ccdecad32f185a9b4bc0f55266fcd557b8dd1fc6bba1426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131296 Malicious code in whispering_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7aa6256e5a6d8018d6df12e5198b16b6de2246c295ec716d9847dbbc73b3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-klipo5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50abdfab20d278b5a9f686ad2c11c5bd98de0ea4406155d7b218dfd1fcb15bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_beetle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84710acaff4fcdbd02b85f1f39c3708b7068652bf8549f7b941bf58a5a1ca8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_marten_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ea9fd5e42a3d7bfe2665346a66302402200abb1a0e04052756caf96c9444f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74716 Malicious code in ocha-sroto5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60634e8c52dc7e630a809893daf1fbc7c5a252f89b80fab1941189445473c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm-peach-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfa8aab3ce401b3098d443a39e25313b00d67c28616431f7e9259ee71de4e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50871 Malicious code in arif-tahu23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb268c31387197fb73a8df99157725867b3de7ea8487a46b7ad0438fc14b4b4c The package arif-tahu23-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

Malicious code in candra-keraktelor67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5449d5592f2ec91aed165e72e5f8a07546b6ce1058feebddb09f949a74aac05a The package candra-keraktelor67-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-50653 Malicious code in vida-lodeh27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b25b99b6305f5cc9d4f6bf8f424d9bf1e31166af921d197f43a08a048ebd5b The package vida-lodeh27-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50364 Malicious code in fadhil-esdoger15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76191f3eff76ad36f3271084e21f3aa98fbc6d4db8a59dc526d36795a4a96ca2 The package fadhil-esdoger15-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...