Malicious code in query-betelgeuse-nebula-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408daa89c70619dc90c25827b6f89e118cc4f1450ae3a3b7e834585362c6c839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-yaml-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6ee6e47d29dabed3deb7f87e614e389d9e327843fdbb45445af49f77255504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184727 Malicious code in oloc-uyg-uhitaggafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2928dd2e441f6e124ac61cd608ce2e044c4fb26cd6b32daea874923a9819e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-afncg-avf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc05097092a28359f93adc9703a648d557822854d9821c3d0ba1c4dd5e39e4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179564 Malicious code in anais-papoa-0pipaiaoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8b953d4f5e1069915ed43cc949ee803a8684fa58476ef30f9450989af93164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ateefshaikh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9375460ec892febffb550010b8ae5ed22c7067e3ae435152cdbd35b77a50bcc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94598839e52530969c0f1168a24fbdea695055304cbbbfd2865cfaded98aa75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrio-nuyait-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d304e908d95352c4bd02a3710de24cd9568ec963be4fe6f36ba12b43425f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153982 Malicious code in buta-trud-sdfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee2f260e42f4f934487de88417534497a669d9adc45b7f49e862e82b45d7774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-equinox-convict-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f830bba97b38273c827dfbc347dbec50ed18767cbe6e901b55fd0fa9562f540f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138491 Malicious code in zaki-rawon77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb10305d81203062d1bdf40540afd0efe616273ec4add06ab1539eac6252429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-tumis10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b1d4bf68eb4a680b8215bf09db4caf38456c3489356de04922bfd88e22f28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc6b240c5e918dd5b6d4a90a9a226e18820d84c3847c59322c60f359f39eece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-jengkol85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b858da1595a14afaa22ae584b49f90addd67b71f2a96106d47da3fc3a8059e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-lumpur88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d7c1eeefa61c1217ef826be633d68c77b81ada7c25a4f168cb22c4194fe444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121720 Malicious code in maman-kacang80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323a3ac6a39146bdaa2ee86b4ba8c542104a83c0e8d545f306b6cdb02a40dbf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116248 Malicious code in okta-rujak55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae86e5f85142bfbd1b5e93fc20795fa333f4f4613dfed337f28d5986ebaaa6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99657 Malicious code in attractive_lark-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7f3f9e76da84927154360afb41f50f932da012db576b8ef3e51bae3307c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109967 Malicious code in ultimate_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95531e0193dfdd8ccad4a47036fb1d0ea16b3fe6459502f44e1d7f4d8b09d062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anthony-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48177e2e1393eb290f935533abba3c48a6e81d12841790e609fc1d4041da6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...