Malicious code in got-jasmine-zenobia-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dadbc22d6c22338cc6fc5058d13df1e0f881a222c8c88cce245321bf4480aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-inquirer-farout-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9db7a24ba980ff244f86a02b8ad82e55ff706357f0b6416a7a3c744de8ced2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-electron-relay-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5fe572a26cb12ea989b18242cbfc51386be972e2424a2d2223b5bbd8d58ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da0c09aa3a47b37c6fa3e23aa49e0f10af52ec0d0925b725afbb6e89ba5d70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-umbriel-relay-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3f063c2281fff1e1b70c86da2fc195585d3c059d7911720de2e6ad6746f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-eleventy-protractor-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0798504104232bd981669802bf8d352aef1ac84de841bfc470416a94c4a6512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145753 Malicious code in oberon-redis-grunt-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7822766d62035c5421f1e76387da5add1f30f0ea6ce261173a4fd00ddc159c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148077 Malicious code in solis-husky-gacrux-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e3d4d871f4f969cba5282084ba6d4668843d298314b57516e622809c5616cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-janus-procyon-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384e902e971c3bf77f1e3356c7b21237e48b31e6707cb7d609e0efa6b0fef53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-google-auth0-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15389f5580c9c15a58a0408109441fdba6487427ec7c99e16aa04252529901d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139006 Malicious code in silent-maroon-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d342cfb1987492d9e7393acd466c73c662083385ece71ef299510ccb7f393ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138955 Malicious code in puzzled-olive-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000b44c3eeb8c6a0e1289b0d1f78123ccdfcb7867e1241d926793c15507041e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-gado-gado92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4703e55d9987f22f4f103c5cffd42ce003b8e0df34f79842d8ceff6286d26fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0725760b34366c6dd8f1aa0d81f498ba678100ad2d99540634dfbc2a0302c293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-rangginang90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208fbb6b01645030eda65f46ca6f0d5482d3f4ad9b457c68a9e9b2f153cbcb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gulai63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c56816dde137e6ef985ac0d96432f2dfc515e16719402ffa46c5b30b3283823c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tahutek2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227cb873c57e1eed2eb867288f56c799f397506eb0d2f92cfa7802cc20874705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de9ac448b26d54d549a96defc50e061c2a829cd9b56d0c549015e5b5bb24ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...