Malicious code in nabila-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c0d8313f5eed921302657b7f1776aeec4b30bbb64f760ac5d6f5b9581d2992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156702 Malicious code in inufgi-gotumafa-anffafoaaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4d3c950e4e8c247daa713b4de601a8e877f4e330f5e4bc25205bfecd1387d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ac0d6f4adcaffccb10590d4c50f9f47921c9621c9d926f8e51950b1452a683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ce152a9765e9aa9c42357658ec3607b5b134862bdf66b0c0e65056fe16a5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93478ffdd5fd8ff790df43556190f9af8b072197d974a2ad70ccebaec4b2891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141844 Malicious code in eager-aquamarine-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf13de1aa551bc22651a383030536d10cf1f8f16c43b6fef17e79218e66d5810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4b5e325e2cfac082460dc57cfc4b2006f296c9dd1b3b9c7ab233de8f93398a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-antares-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80905b19348dfe1664b0090e7c37f23b84afb3cf803191684c8a5a86dc2daed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-elara-europa-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f89464e7e746d6c3b79b54bdc739a5375084a41e1e9a204bd88647bd48a14ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-indus-ceres-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183d484945bde92944532e2b9af5c200b70e70bcd5879553d78a8deb2da8f18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-markdown-event-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e717a25dbea8f02ee1d1fa07e2a1e6f816a3ed3b0265bb160bd0492dfad644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-node-config-less-loader-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23bad10256371cae16d24ae91e4e32c12a54dc530bfa4561758bb271d7f2bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-polaris-dotenv-safe-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57e19ab1937184b42b470fef639f3354a1f7f637d15d6acba77b90c665a4194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-readable-eleventy-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf21e5096610063555185136f2e238daba0c1475c4d10292d1a23e6098811a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-docusaurus-soap-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b079ca8f526dbb726dd16f2f2e90714f1804e7750dfce6c0faa824c9bea016d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-private-tool-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20450f86f9c85a49f4510f71ea7660274fd84c09b2dce51b607b32f0a59093dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...