Malicious code in fini-savion-tran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb8ab73d47170577c9e12cd8d3345cabdd0405997475a492176d2ed5b9021be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-marzuksi-majaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9f911fd3276a4c234c5cf778ddbe4637aaa276e1d160072ccd94bb6a55d754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164700 Malicious code in rino-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4938a981801fbb9fe502551519687324a416774b96d8dc83c85349b04582bdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159537 Malicious code in manaf-marzuksi-majaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9f911fd3276a4c234c5cf778ddbe4637aaa276e1d160072ccd94bb6a55d754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165482 Malicious code in sabua-muyaig-buma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651136a8912f79d12ae5a27a42a9047676cd9229ed3e630164d7559fbb184237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-namadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa09411b3cc70decf5a022987ed6511a63f127eb98f35f371105e1c34341de81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9bbe49dc6cf5df5441ee5a9cc5f7ddf313c3056756c78ed1fc53799a144939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-taum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1dc4d50d5470bc8474db2c84d5fc96d6a8f76639530f3f405b36c7b3984307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a26b2e7ed34c6e2045ad0c2f5d97278a06af9f5f50399563000cd48ed1b3958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160742 Malicious code in muda-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19059fc2c4097d63531eae0373e42c85b5332956277bf0b492afeba328e4f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149609 Malicious code in xanadu-run-script-ceres-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148303 Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-magellan-buffer-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19433513be4ae22b3df0ed3f88b8b07c85bfb541265eb392bc91c89d720368c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146698 Malicious code in protractor-sagitta-xenos-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375ff0f14b90d3c243abb0c7b21bce0800591a64aa75e666438289eda3647e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145865 Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa5e7c9dc3d753d65b3a92dae95e45ef42619f35d4b3c87f3f5db8bc96069e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-dorado-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd77d58a1e5eb06d335b824c723bba81e37cef46ddefa88e94c9bd1ef938523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-rocket-vuepress-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92eb8e6b2794182f84ca60ac2dd4533e6e10d51086559a89fad109487b8f4d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144096 Malicious code in karma-centauri-nodejs-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbea0749066ed1590c1aef758933c3c7852e36e96cd4693c167a1910e082d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140000 Malicious code in betelgeuse-registry-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4043428c8364873adc4d1b86cc8efeaa27853ac5456f63216930f7c514557f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...