Malicious code in scripts-shelljs-quark-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c62f3ca6bb9a8405ca6865e83fdd43928f000b1e887a138caaaf6a211618764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183827 Malicious code in masolv-avo-cobsabuabasvov (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5581375be82ed87011b1befcf0e0e438a7a416b7183dd31d738a898964632894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-oghh-fifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461040528feb7929f516670438a4ec83959bced0e61fc285d9028a3189a43cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in btuis-suinana-vimva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa7b0015d8134787863e4102c9771bd58eed502d0b107c96c194e41646df640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176270 Malicious code in namacida-nutayayafar-kadasida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cf86d867552b2bf014c04bee51e452f94a2732301027dc8495259f51105870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170484 Malicious code in verify-taic-malaskkulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cab6ef4cc47563a7d7bbeb5c1701d237ed1bba0aa0a9f19d1b1ec14f69ec97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-hyperion-karma-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-firebase-enceladus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0ccaa43c4ec5a60f07af0942c0be08f1a9c2f1982ddbd6ee2481c161da909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141856 Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146507 Malicious code in prettier-stylelint-enif-ophiuchus-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1c36c7e8318e9c03ae9ff620c9c5629c7f9fa3229ad0c5cc87694ef5eae4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 736b874d9e67ba77d0f9e058e52e1b687fbe0d193b33cb65bc6f9eab15b6298e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-miebogor76-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b4abe739b459b9ebf6d7d6a1c9765cc2f5a105f5c4ccbecabebf06ce1977e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136819 Malicious code in sari-bakwan41-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0fedc544d177f2cfe84754fe34acb3df0958917be2a583bc0085600323d9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138390 Malicious code in yuni-tumis63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1cb3ebd48a689ea2f8bdd8d49ec62e107fb1435bfbf26640ff1886b6b6acac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f47122712e6638e40a864491a33a0dd67d86b11ffa204de13bd0c7ce1f53c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-papeda39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f5cd4b585eefa4ea403cfd8855e237440ead06a5b8fb623aad4ecd2b935405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126763 Malicious code in gilang-menjes62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a948e4bc411e7e172c09ba61fc6a90b1634ac3128932f3150d589afc9867b474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125753 Malicious code in dewanto-ubi63-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8bea45dcd3265cdda177925668056cfbb59114e8c6489ec1f20c6908c8f8d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114700 Malicious code in ida-rendang5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9449f489c1fc6f67fde4a9ca36be6ef7c84404780b9bab044d07da28e848d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...