Malicious code in deserialize-double-simulate-interpret-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1114da922ec6e540f842f3f0bce3a0caef3f8610fdc2dec232c5995fa3a49ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stack-bundle-public-air-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6dad623ae43208f3d2ce6d58b9a6877f82f8d1b29ce106c6cf596c71f8fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biogeochemistry-carpo-alphard-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6ae68492781c51e2028c436dc6451385234e8dcd5c0047bca8aba4e03c5e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-charon-terser-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3508eca342f082f4e63f5a94b88316894ac60ba0b8e0ac588455e64488807bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-duplex-request-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc9a8d56bd914325daddf0f1c5c1d6a1d44632b799c474ae33e71c334883104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-sync-loglevel-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eceef989feeada3339ec402d1445f185a3b004a1f1c1c4a71553971739a38d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-radiant-avior-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3482009acb57d79c98b331584817b5b1aa0eebce9c890bfefe12f45ffe90242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30834a5fbe857adb14874de5f845460556c9a36ba75d7c2eee5f917aa980bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-oberon-lint-staged-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fbe5fbc07c10352f1d16b4b7e9d07886575f92405b0512a75a06a0655b6367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-callisto-commitlint-config-angular-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cdfea94216d46394d4f07bde016b03bdeedf21face4db3ada1a9424b0a6e4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-final-iota-upsilon-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5b112f5906a2a0cd00f09c3c6173c301de7c42a79c707edaf7e7b5470c38d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1990d42487cdd6a4de6dd5f0cdff5a1a1751c2f65f643b9dc21407c36ed0ee3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-luna-meteor-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc02951e53ebfa9301168eba0b7c56d46b25e61f53253199174afa594b15df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-perturbation-testcafe-astrobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e462547470bd8d605db068ddab1aa784e3364768af7f6f5f9b691f06acdfba59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185620 Malicious code in async-gridsome-xanadu-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a279895093e63b7653ef1defaee79c1cb92b45475d3a6c650d3ca4ed7a056fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186841 Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844532ffb61dedf116bb671dd0cb7a8e6ee68b4d6e7b7a3137265a273e7fca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185545 Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85706cbfd581fad81dabf70d7a7a10ae9b714ca2c7b392c8337518cb0800d8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-hydrogeology-juno-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08452e7565cb4869c01bdc75de3e09a2f27a9b0d6a9ed83d2407febefd2542e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-hermes-ichnology-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f806ffbc0d1c5c2ac9366ab01274cbf1257aad32af0d5554332dde5e7d2e89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-nightwatch-nconf-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e249e84533ba3f5ff5d0be0c07b16886f7c224e9148d494ab0f395877026b2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...