Malicious code in teagood-yakuna45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8733a2f0138fcb0150689f10a6fa2ff265566083e050ee7e7e2f03a12d0d556d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e1f456dd357bb7cdd8bfc4a8f232dba1db354d96faed76154574f1739e18a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b9db10a495204ea416d7545ead1385a78b6a7309be6adf660f3669b0cc737fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163325 Malicious code in nokire-rara37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55da5ffa5249f67f35bbf9d4ccf67ebc0bbd14bae3197994780de15161d71320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153605 Malicious code in azhar-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fccae25d42ba7cda3721d22b830d474bb1b2e1fa72909971cf8c9ac26c54431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156076 Malicious code in icha-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9047f69afb543b3f7d03de80db790532db9cbfd1ca1009d43c2d42261f4fe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152719 Malicious code in arif-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6468771d3c80ee6b1203965a96a69e021701b0e611390fe962c4fb12c9d3948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-aldebaran-link-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647259965138fb26678eae545bcdca97f5a7c43870a0ebce868f5a65afd8b371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-chalk-neptune-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f350c32b8471bb603135076ced6a8677a3340a0c907da9258101c78a84e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147494 Malicious code in rollup-ceres-nashira-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c4e65abf401015d4d4213a7c0ab52a1a20d055907783400b40e9a89447b753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147114 Malicious code in redis-rehype-ursa-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bdd382eb1e539450124dd835e0c6ec1041569faf9e48d98e50bcae43941623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-changelog-fomalhaut-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c35c542e9752b2646b451d0005227ef866b25937c4e8fadf117e531e46f067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147642 Malicious code in sails-cygnus-aquarius-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689e43185c0ee1245ada3f9ccbd0decd64ad9f2c0c58079224df625ca165c292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139173 Malicious code in acamar-dagda-koa-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ca820a2561e3af6c3516d615cf56b1e30662bed8bbd8fd6d0ea9752e2b338c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-polaris-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909b3a7f01141b9fbacc667aaf91d800373fbdfde86330fea106757063bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...