Malicious code in umbra-iota-graphql-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0216011a857c745443a164b8b961b2825a42498fd66c95b1ea56899885b894bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-pavo-asthenosphere-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c245ebc6d662cd2d791c2a665a08b64c0ac325a3faea4ed570146f511d921147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-photon-nodejs-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3152b5d159e60035f53ed829f5362c99844bd6585f8e614ae1b496a79ee78f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-genomics-uninstall-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfeacda2b376daee22f78d9a59bb58433ef352a72d825d0910791a5051064406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-dagda-sync-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e2fa9140c056d951512eeda4b917c4d77a95617f974d632aeae2f8e5465c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190068 Malicious code in unuk-loop-mdx-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295429884cb23c05cd22de2b6bb4cfe7d99359296b20883aa2aabebf7b820b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187958 Malicious code in mechatronics-augmentedreality-hapi-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bf9f3ffa089433f5b69b03685acc2fa84ec50ba871248d9d8cd4ab5d4accab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181224 Malicious code in @akunsansan0/biru37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba26c58d7fdd0a6b0668a3f02b7fa37e0134e7e9395494570b5720e7a3e3ac72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagod-naiman9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3fd3deaa2d95ce6183d65ddb6f427aa8c984eb96b7c230b37e735a4c216ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defb12384bd8f44458a46e28d0ee1bdbaa1f209ee7c26e4698f5383f8c77bd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177032 Malicious code in nuyar-adamair-taqaibog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a999999e2e267bf096d75894926482fcac28705259bfaf3fb73c5ce3889e574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoi9r-radiatona (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e92f96ebe1a79df1ab46f0c5af47755649be8792f324b9dce08e443ff63477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amjadatif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10373ed4688aeb36cdbac75b96735d6bfb847a7625e36cbe0af775785a941d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiga-iufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac01bd39ec8790283fdf4388b824d74a21aeec432a92f6b8d4d8db01857d634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrasd-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3047c72872dc301833d5a0db7c752459402abb625392cbf4300c29aac728aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9827df1733cbf29b6cc424762bcc0b9d031b64dbb944d6b08df58e96427a6395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-msua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff54bdd3b9da82d706b47c7402ef2fe2e93186840de93a61ca13c234dc44e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503486347f606f86ed470cb398bd754df2714fbf2011cc7bc9167cfca61c3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-munsat-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af925c5b55ac8ab265c8d18ac9108535731edb7eee1e48c8371afa25f161f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1b955c92efb7ddd3b7f47a77eb61cf45ffae7f92327911196224a2c6ab098e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...