Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c99fa5451f2cc2dd0102d63f87d4f740d4e78005ef2ea86783a16a1d892269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a205d995a596dcc62e666ca040d27dfab0a5f2c7eb4c42b9911cfa803e4ac13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gaac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86296838bd66a8bc2312e8ecf00a1ab1206484e370efc551d7ca7daca3eea138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173087 Malicious code in bafai-sunabi-cumgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3897ad8cc03fa16f5c822f710b024251bdd4993beee4366a704334e5cbe48520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-bna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795896f4573158586a0c371e48a9f8bd1ece4cdb775440e6aeb9406df76764e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162600 Malicious code in nokire-kilua14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331cb0298f2e9981c13d116baaf0117cbd2acc7d55c12846196d7c64a8209c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-uui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafb935217a730a7aac83e3f5ad6752b52151a0a5944ae8b85f727bcdb9e59a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166915 Malicious code in teagood-lokika5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2396dfe3ac8a8725be8a75de9cf22ea89b7113804c37f2960e60ea17d1ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165404 Malicious code in sabua-muuyfaafu-dafuamfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25b4348f9237bc689b0a993e99251f988ced25c5d63ca8cf8d31aa04903ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-wezen-html-webpack-plugin-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b5af772803ada032750ec3f8403347e7a424e0ea7df55a1c9aadd26abc0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147753 Malicious code in sedna-altair-jupiter-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490579ad343c9d3284e0896905b2135a441bfe41f9fdcbab1d7fdcd7f8d443e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134361 Malicious code in integrated_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f9e2b6fbe5892cafe833a85879e165bfdaa5d54010a82722e4f609ea33bcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09066aff68f0ec778724cd00462496e7c877d9a172dadc00012227515b771f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15738abb89244ef29223a61b6f69471964f68154de3b6ea25b7cba58e043983a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local_chicken_green-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f1684e4fc4ffc582163966f9f4a05e4ee42634fcc81a410559085e28f14ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7233d55d5beb0b5015dd3a801417a7eba67444759cb8b6c0e17a79edb683e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103832 Malicious code in huge_reptile_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e074023c4b051c33af23b3a07a50567b808ba48ddae9f79142a04e971f3b4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b795ab3fc079d7e217423de3ca0650aa455cb57b7737f3e8abab39affd32dd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...