Malicious code in throw-uglify-old-spy-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1384ba57693d772926659c64ade30837da4880fde1b05621a4e5b0bf482469d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189234 Malicious code in rho-water-load-info-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14f7985d79c2471901d930216ad13686fed9538a20e6f305ed6922c2116b68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90863871202809f863e22fcff6fafde6e0d34a59b688294784c84ff57f7e4333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181627 Malicious code in astam-ifst-diakavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015568fc551e0655d4f3231f5995b8d6c5282c0c3220acf3a1a07e119b71c98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokmiuaasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb590d84951f8fdb5dde8f11d1ea053dbc65b7294b7003ce75922284e47a385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92147d8e6746facf1df0028de1136e70a111e9a32d845532c7b30d7b2a715615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10baa66a2c7b0723052f7f44b80a18c6b1fc1a26cd3e6ecb956ee123187c1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-miasofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafb18619b1455f504de011f58eb4918cf8c9fcc0917a2a7aa3466fa931359a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff975481296250001387bc3b58cfdf285ec53d15944680b59994912771fde21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166420 Malicious code in sunderlan-ud-vamnin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f967b30116455392413dec9354459311b77ba2a876c17b2a4040f94d3d13909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154694 Malicious code in dioago-kamoi-alauliaahanoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b60239c36b0658f2e141d4025883e9252adb2c402704118d0b07905c0630db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-less-elektra-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7113289ee85e9f5d55f5fd301260d14823c26ffd054923a793191ee7fe7d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146323 Malicious code in polaris-arcturus-global-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f7b2439427c477eb2eebd3e69cf7473ac0d7f57323a76a547aca39daa75e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149172 Malicious code in virgo-toml-passport-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584f8b619a6b42d51e3495d518d1c3de32ee362ccd4c539987a484b1f3711094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138709 Malicious code in exuberant-peach-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e30dcc58bddca5b500b777db9473dd477874723af2637af2045b58fe4b702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89766d9682ff80bf9d1b51195b7bd7d8291fbebc3613c320d55db3b60d04ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4835dd9c118e2e7572641670a114ab464450c6c17833f0ed1b9afe941a8f987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kue55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb43ed1176e257448ebb60a2049dfa3a23571f1259fda7d03c70097bc52f0183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kue70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ced88e5d34031ffa2a2fc3f30dee333ffe84a2242530c4396aeae92c7f2964f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...