Malicious code in nokire-nakala32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45efbf7f325c41d25794872b80035626ddb7d5e3a41363b143297b30204f57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153446 Malicious code in avminh-afogofafafi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaec3665038b1a794a5c5320d0885467c8528f72e178e580d67cc8e1c41de24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167142 Malicious code in teagood-manaki74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52dea13b0b4730a2d0735716e33bc2c26d70bd871bc6a35229e6972c5d56055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160405 Malicious code in miftaiky-choose-then (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70630c4c36bfb9a9f3782e5f445adcf6455626dc0581cb83d4cc998330f1bef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170217 Malicious code in uyaudtu-tauuyut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf6785b067b5c2ba4321cb1a2e9a97c644de8312baf9c57f58a6b1d014587f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150451 Malicious code in @mipta19/ttyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee8af1d408542316707e0f140c6fc06c6392ec8a777df03fe2fd183b80f07c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160630 Malicious code in modirai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fdfe217650eba4a4168b8bc605b0f815140ebc90e1fa41fa0ea0738ccf2cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154138 Malicious code in dajouka-busad-rac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96878c5e2d97fe0d69a43deac01da741cf2fd0c46b6a2d7d5e3fd109cd044ed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-gridsome-callback-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d649fb3727c16290ecd60b5cbbaca8040d62a9ceac4ce113ad39d98f13ab77b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-spinner-io-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6884e2ffd1ffed28fa9c2fef656a4ed395be617c7b381ebd411f4cecbb78a380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-fetch-epimetheus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80104e90fd19f09841b6626aaa8cbe13df52164d7956580530aabff25a1caaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-library-nebula-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51633b5eb10d91cac3ec86fe2365ae8450373b723b5074e954f4a5c87df7bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-umbriel-relay-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3f063c2281fff1e1b70c86da2fc195585d3c059d7911720de2e6ad6746f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-css-loader-kastra-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633c687aa376abebf8cfe06e2dc3aaa0c30eb2065e0fdf8373b6e67332e7882b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-less-io-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34eb09b771f9b1127dcb61d38526c7427d7ddefd7e5dc2b2bfff596afa974fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-winston-yakutsk-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe636acbc97a299d869084bd0513317bc3bda86908730e32ac2ac31c50b13256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-terser-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b5d4a721c3461428afed260576084177aa8a1f51ebdec6342d0cc814bd1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e74a0f0b1190b28e62b75438426908b78b6776a7293dc127d4f7f037d74279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...