Malicious code in debug-user-pipe-sun-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b956520dade516641ac3e4bf6e4c17f3370f200481d4157d05f06f415cd0915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-buffer-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47310359866ad1e902cf5ea4d54ed1da4c69f3abbcdb2e4423b5f5b5984e09c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-warp-webdriver-mocha-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95bf93b3651fd9e5262e28a4c025dfe14338cabf906f3143dad4f1a1cf765f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetar-palynology-uranology-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd8cb005d3b13b23a50a504bd007171a1a10b97495979bb817020abdb259373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holography-commitizen-kardashevscale-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1f20171430318cb8fc7ea3e9103efebdb68821c4855d5dc0fe7f1863fbf6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-react-bootstrap-telesto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fe8d301287a2cbf12ee63abb39ad3722dc93d2d21a760e22a0fa2a4727b4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-webdriver-manager-convict-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9dd33aabe6b5b026655e8cc3da8627bbdf9d68cf9b8cd88bf86fd96847df16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-juno-cypress-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d18c480ca87915de8b545c8543b1908769b9d71711027a718c1af31ffaa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hash-uglify-cluster-info-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a3a53ec24253c6ab5d1ed24fd3cb74c1c53f7311dc887ff7434622f50ad233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old-import-decode-table-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3318615e0691a5ff419704ab106e4bb388891cfde25ae060e932dbbe49b4332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-koa-castor-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c11e9097d5c00ae335a975d0bd038394411ebb396691bf1af493adad32a9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-parse-compile-sanitize-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67422c824f3aa72587863ab29b8cf8aeb46cd13d5f23bb7977637d0717d8e92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-forever-uranology-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2670113820a8f2a2c46158eeea3fbec418026540f0e9939b1e4f110363f9c9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190226 Malicious code in warp-ora-duplex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186306 Malicious code in cordelia-dione-hyperion-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff2b4d8c5947605df328faf7264d7223be4e7379aefc037d05f19521e539967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186715 Malicious code in element-ui-nconf-oauth-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fb80ab7cb345deae95e9acd799044d7c7a2e26647d6c158c687da329783e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189919 Malicious code in thread-daemon-try-omega-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e433f4a84e6efa7b11638b10854c927218008bde39976e0df1922164229fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188597 Malicious code in pegasus-mdx-pino-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9b25739f729310e407971211ce7a65d98ec3f75743105e9c830595d96b8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189654 Malicious code in star-permission-parse-assert-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fb324b2acae3a24eb32deb53820b89c37d9ead245b8e2cfde66d4842fadb29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189632 Malicious code in spy-sun-byte-debug-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94dcc9df0438390b12a282f8619d7e4c2c062b0442a82501ef29e1bbdbb48902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...