Malicious code in lina-keraktelor15-riris (npm)

Source: amazon-inspector 284c3be6c93cd12196c05e9b49bd3c8bf45bc3bf74de02a96cdea5e2045a409e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in lina-buburayam4-breki (npm)

Source: amazon-inspector ec4ab5fb65dcf8de9f5bf845d30678a0f9c00d7c0a008f54f6ed76a179e71878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in level-copper-firefly (npm)

Source: amazon-inspector 29315ddbac3b0b833f90a4e6566275ffd2fe34fac89cb6d49d1c6971a469773d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kurnia-tomat3-miaww (npm)

Source: amazon-inspector 12a9f7d5c8d02ec7d130a4a3efdb967cfdceeeeda0544c33ce66d278d267bb5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in joko-kacang41-sukiwir (npm)

Source: amazon-inspector dc380d899818566bad9fe79b0fc463314356477e25e9bb822b2a16b6fe2a3e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in janus-nightmare-proxima-materialize (npm)

Source: amazon-inspector 3bba82a0ab80e814c47883bd351c7391871659175114fddc99946f50b92812b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in iwan-lutis72-riris (npm)

Source: amazon-inspector 20cfdcbb5cdde4bc6c4a651698d3877c14a1e467e8e3d45cead236dfd42a9eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in extraordinary_cow_z3n (npm)

Source: amazon-inspector 0be86e20a98e614f93e8405cc8e27f7bfd31959d01320dd163264d4a08ca80c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in enormous_emu-silentdev (npm)

Source: amazon-inspector d50deec65400c81ba13dcbf408b5641291f7b318dd5421e758c65b428bf4cdb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in comprehensive_rook_requirement (npm)

Source: amazon-inspector f7f984d552ef645b126e3a9b163a1d949770bc3d36d184a97d74581448213a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in comprehensive_alligator_z3n (npm)

Source: amazon-inspector cd574766e4800cd44c306db923d2d88605c54b3fb671885c9841c61651e347d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in characteristic_hippopotamus_z3n (npm)

Source: amazon-inspector bdd8f4a62382dd3ddb6a9add286f619027d3dd684c1821f4a1668c0f2d2195a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in chakra-ui-eslint-plugin-dependencies-geckodriver (npm)

Source: amazon-inspector a4e7a73390160c376cfb3e4a5257b5aac4adef6048328297cde111fdbe358c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cassini-bulma-process-materialize (npm)

Source: amazon-inspector 0ee99761b34005b8f0441e1be850586998900e012b2238be5337bf0621d44359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cassini-markdown-pdf-fork-polaris (npm)

Source: amazon-inspector f7856ca00a922b8839ecce049dc630ed44dbd0a8584596ccba77f6f9b3415101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in @akunsansan0/biru35 (npm)

Source: amazon-inspector 50b688f91ab5fc8b7e22acf04af3867d5f53b468cdebdc0b93db0b5da1cdd748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

MAL-2025-186170 Malicious code in cli-webdriver-manager-lint-staged-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f52aee155dbc4a5e26a6be2c56104d10c6f19afe48943d15592317697736872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185857 Malicious code in blitz-ganymede-aether-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b181543731aae6a400de37b08c10308d7f1e0194a3a51b57d03ae970a4c1feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175796 Malicious code in kupaio-uloka-jakaloai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3ca4821bb1ded4d4a9a8af8cfa0b645e161351e2d1d974843dddfea1ff3e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-unuk-less-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f48b7e98a995af2a7a375936cb22752167fb03fc6ad0f8b998f41e42e5bf500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...