Malicious code in avminah-fagmdas-dfiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99a39e67afcd5c5666b34c5286179742ed6daee9759209e4436765406616428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcf57026c8819f69df99b8325d82c7cc40db1d3902ffbe72c1395e79930ce92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vilanuanakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf8f2ad04be0b7bccb85bf52bbae84211396bc5e7b7e563d0f7dc47f8216674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157080 Malicious code in jimmy-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0186b4f64d2657660cc7e36038a3790d05b6a68b9fbb0c4cf292f12b81ca3631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164788 Malicious code in rinto-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0215c4d31f8e54f3a4a55c0c3d36a39e8a4d19e288192af5b0d51b5728b2dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c9c8db26034f754ec5071a65dfc91e54551c08dcd522ffbd94e3e23e07efd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udilsk-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168646cec68e0fe98a04c853c72e32ef7e471e1e3f811160bc5fa57a212258f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159648 Malicious code in manda-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c9487a9f19ce61cbd98be35d2598d9f7f25834ba33c5a7d7dde4a9e1126f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169152 Malicious code in trevora-cir100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f0d2cb75b0d14a590f5989243a7a322278f340ec46fe156e96d91ad36297c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-configstore-kronos-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6152d31759998ec7f7ff0c7f7625b2df797123c6f92b91550da3d5be8bc0cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-spawn-parcel-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b13194c1a937286d13ed6323189dfcfd26827e4122a40aae37f513b84c0a9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-config-karma-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2895038fdbbb1d7ed4a9e86b2391fd50d2cca0ca675432738eca6383610026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-zephyr-public-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc49c0e5e70b2b1843f86a8aae0bdc87d16c02b994ab5f99a59ab51c8e9cc016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-phoenix-eslint-config-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e2d78552580aeb2d96be7e24039e24b488659a043cf2e9ade9ba758d552722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-lyra-solis-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93918839bfb75a9a119aa6c35c5cdf81d305773332ba2da44822c50953cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-xanthus-hyperion-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac70bc9cde391c15423db0a199454ca7b61c14d507348fee8fa1dc88cab3f789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mini-css-extract-plugin-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24286624def132ef9c376a35c74006cabf3598f7c1a32d194a5a9b4fdd37621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...