Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-umbriel-jabbah-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217a3470a4faa8cd8f45cc9db7f1cb2c9a4c9c6119b0954169918df22276ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142348 Malicious code in exec-koa-andromeda-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbff9e6221e3538f5d32ce051aee8f04ba057b18ba87e9f1a0f51ab9d9c0a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144210 Malicious code in koa-xml-chariklo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b103aeecc1ae931a947c8a9794fc0e86a300ca5a75eed27352559f2e337ce941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145606 Malicious code in non-blocking-development-avior-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6100a1aca3472a8e1da2302a8ac42b4ea6b7790af85fb94874b2750fd4e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147730 Malicious code in scripts-eridanus-duplex-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146438 Malicious code in postgres-lynx-server-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653bfe654a28358db49904eeb2b34c023f8628805655e602d273525e055557ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145000 Malicious code in mira-altair-markdownlint-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-donat12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a51db62d7d0c9ee26bccd22cce445c9f90b36d6793315319821dada9558a6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138551 Malicious code in zul-naget41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a314fed3f739696529b60d34e3bad1a2b24fc5dc0740b3eae36f303eab325ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-klentik28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edd3e57e9ccac90e4971c3fe2c3e98cdcfbb7497a55bc329897a53770c8cf85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-botok22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da549713d03eab9df6073e664a77f3477501b4a959f2f85890eed6855510149f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-gandul38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f41289340535785f892997e648b2ebff355f3129b1fe4f58bf188496c81f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a400231e7db945991ccb400c21dd95a7e75b2db14f21ac10aca4bafde1536ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e557c059dd110d3836c2bd4e071da039236e743f0e62f243699e9562bfcb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-teh52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5da5b1aed5a9aa7dfdb94db63fc31ac50ceabfccc84e25d4774cf0f04b085ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-peyek74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a48b92ad50f7f1a172e2906c2b769b232316b39b802d9af43aaa165d297f7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-ragi44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc1359ef800e336448e3a24fbe716047e87e369883f7180b6e54fa173b76843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8774428fbfb2a2a8fa660c061cc07164ec8e8d3801743d6db0449fe40577bee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...