Malicious code in magellan-bootes-resonance-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8b4773259d5547357d870a866f9e7006b8eb86df99ec58fbc123d7da10ffd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnu-nofy-gaoaigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcc72822b012d66661d2dccdd3fe8529d9693ac2ae09ff2b01113daa03f749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181044 Malicious code in teate-thy-sonic-vemza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5a4b6eaa90f8f6fdd8d18dbad2e17e602258aad97966157c9f642380dfa43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namacida-minuday-nartipafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d042063ed57dce686e136faff4190225dabd8d6c0e993a5d5b9ca410ce036782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db9b687ffb0a6726957141c659c3843f58a9adaca458457fd85fc0f40b9951f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-mocha-postgres-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b00c6a74f6d2bd88e6379856703cfbbd465278b276af4693ce443f13ac429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141754 Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-middleware-procyon-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2da90094f5a03de39c5fd357369364e0b32f35ff16c2eb61f23441b9e23f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142805 Malicious code in ganymede-io-canopus-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f96f8497b5084e3ebe52ebc88c51353e9d17e69efa58a47766155ec4ba9b577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-kue95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b339ef7289f29cd3a7ee1d04a91186583a30f3710296d217a4dadf35ebea9db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116256 Malicious code in oktafian-dradag98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562e375380aeed9cdd204446a0d6c5cf452c016d5bbe86cf255320af1f0852a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105749 Malicious code in mechanical_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7639526869ae109d889dfd0968e6694bb5dde33feb856bc3f580357ac14defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_magpie_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4793e3eb0ec9789fcd86e31610ad3e39f2e520977d2617aaaca51f3257c4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c147c5721324b21b099f908825d04184c3424286a654b096d00cde7d8eacc5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-rujaksoto63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c170455967e6829270ddea0162162e0b133ca49d6f827acf9607bd13d6c3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77390 Malicious code in competitive_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db56c3512e64aa2d868590a1adf4b215bd7b14853d4199d33d6442eaa285d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-amaranth-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3396fd3ffe19aa6c82a1a5ba838258a2a165323f8dda83442db57f16617b3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-nasisayur19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd591e872eeff7ba23aa00900d931efe2899b628c5882e00d1bf4e5091e6f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...