Malicious code in passport-coronalmassejection-vulcan-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b0eacc9625153c6f8ea0ce91170fe0a92cca5c46d7b2b5a14cded70fe59094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-hyperion-bootstrap-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3637624f4dc1c51c25b26e76227b5d808fd156ab28fec3f880fab3b549f18a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in authorize-code-bash-encrypt-abstract (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5863c4c6b7c7c4948eaf1cdb4d635734791e194435e929c9dc3d24a822889e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-omfi-cafacevavisvoetfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c8cde0f7fd584f855345232e8dcb9b931a46bbaf8c34d1408dd39a54ad49c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184696 Malicious code in oloc-uyg-ugaoyugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f6154af76a4afd246430d756fecabceebe3ae53c7e4b922aef36e1f56b51bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kopi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075bc07912c66f901e5bb925929fab970bcd021edb8a7922894da2fad8587ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5096d4b84d33c9e3a0f0196b931ef3ce3c4e70f376d450ba3fc5fe4a327bc52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181354 Malicious code in @mipta1/defenmiftaikyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90110b4cfb6a11264ab8502500cb0a8df72c198c3dcf962e32022aa0655ecc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181202 Malicious code in @akunsansan0/biru17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e585a6d76b1c0889e4e1033a82364482527aeb29d6ebc314d408ef48854b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divata-tusintabi-ivanaduna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b980f39d5075cfa7de3ec8c3a1b2fb5bc79d1a4755ff9823e9f01e1685aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-darde-ogodaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d814e6ecaff4819d17c0596b38c1f3db2dcc4875b61af1de112bea60d5c74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-aifgfafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a1ea64293192fb3cfe84dbf123465580754435dda16078499684815685e9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thumbi-vs-yunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 932bc33c6478912fbedd1e7db522bcd4d2fee122a9ba408d810194baa4563094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soi-vanabdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6ed025ff8404821e1f3684303079187c8f2b9301b3dd97f6dc68d374e0c0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173387 Malicious code in buta-fbna-gafida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2cb6f0cd0ae98e4955629d863b3ebc3a22af1de76f39dc5f17a156a98a976a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marouanefrancois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1884c2bf4143dc79926414c5c40a7293e82e6fc6ea523835d8f445e5135780de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anisetoilette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f9e8a43607c7c9471c2ce3968003cea380dd2b33ebe9534446db27ee664fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21aca7e8759b6653fced30274194330bce5f545f1f95ba25a875322c6cc6a4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sffhssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fadbc252ad3871e24286f8f3dc2c8c81000bb13a9700caf9d4d6412015016eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bf3e83741026ffc0b582d4bb4447ce5d04675ded820b25e935979a5f872959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...