Malicious code in novacrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ceb06da2f8e286230f2a5300e90498f8f190cef90a9107ab69bacafc258d0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167435 Malicious code in teagood-nalikami36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57d6e31a982104691680d45df7f1562a6c5ec186732974e3f965c593eb7617a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169815 Malicious code in uinsu-lisa-amaiyanba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cd890c4d557f2ba68067ae077e72535156844f18ac48919dbfd63c4ce43670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioloipe-agt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10e94d82929497fcd33b061af0d96000e5608e09bf6f82fdc4d58b8f8a30cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13930c7c37aeb2a4d2eb002fa7c91a6318ae33c1b652129ee4a0005b14cf8425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f7c41242bc81e00b0321092c34a3f77eaffcc9914ef739ce1dc22b14372b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c026f1ea7bd9d829c4161e305da4869e38714e11060a85267b5985f94b1955ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efad6a2acd2fb00980910c0d99b6e947d7f3600072912f8b770551b9a22bf90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144857 Malicious code in mensa-passport-module-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5741b69073dbce562dc456d306b14a68f27c7c3edea1b1cab27299e4d3b7ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138918 Malicious code in otang1150 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a79d7e22256c4d1c2ff8b5b9e5bbcf5b65a8d4c09b57516b13bb93089feb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sambel54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca5f6dee8b7e2c5c88f614f6447de0aeac3cec35a4138d14a077d369aab67c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136509 Malicious code in qori-sroto29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08463353ac52a13355f44d4d9931e261a2999c0b7dab31ee85077383508bcd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129453 Malicious code in purring_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75d9dea726f1ef1597021e59da4562e998c0f9c894153d93ac8700d4562f65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130618 Malicious code in tomi-kembang40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5e72dd21c42b5fdfe0c4330850e05d00182e5c3b4dc968d33d7921227919a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1851b5d9fc0efdf63e2836b75ca67a2e402797a2a7701844cac9ad24eca527d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87434 Malicious code in kresna-mangga10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300ab2e2f094089fb8b966a582b6ad241f7d45948f9b9b20bf4bd5892e940a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tempe4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de40ca6952a24c22d94fe3ce55cc6523d356bd2c09ae978b0ba69dd11f06eb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60223 Malicious code in curved_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b3d058e062dcdd5260cf656cdf1f0076bcfe87293bd56bc848528b3f847ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56442 Malicious code in general_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1722b769a8241310c2b85303cb9f3d67f6e76f912617539302441ff5141cb7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...