Malicious code in cybernetics-concurrently-testcafe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8f5792ee6c85cf91f477bdf5b37dca196fccc1875897cb6bdc09b40cb3c6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encode-rain-refactor-execute-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ee24f91b8cf6e03f7269a7f2c713ec12a15e887c78c0ea82e730ed28149481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in user-route-fast-easy-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7773dddcfb7d81f96523f754ca91e75c1bba334c0c58daaa3e4263791ac88bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-palynology-kronos-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbb0c80c490b51b1c0db117fe652f90324d49f399fb71d1be2c441edfa21254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-cosmos-mongoose-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40fa86b786f980c3c1320b01efae8acafc5bf76d1ad8447eb7724e805a945ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-flare-celeste-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b9d41dc415d07ac9a8656e3895a099dc4d7424b7a34ab8503ea5573f770548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-apollo-rate-limiter-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4041eaf381f192fe6b5f0fa41e0d62e7c44bdd9c3dca76d45a758c432e541b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tree-function-kappa-decrypt-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cacb380e1ce93ad7d45f252a5f9858b2a29a47775e53ec4c03d4779cadce49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleontology-acamar-steganography-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d1ccb96d7ec2f9626a93f33572ff27aa51718c6e0e1f4bffd1f94f89e753c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f1940ec494c0d4680f56338f595cc22c7b88792f2adf2e663d5b3246e54920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-wind-decode-sigma-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89e6d425ea10a6bbc7c23e11410d5d33053239f7ec72033f36de7f54628073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coronalmassejection-terser-zooarchaeology-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f17a3906bd4a11e984c0df47d8cc68a8a7f61cd950e0a6de37029a1ce951b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-neutrino-commitlint-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97bdfb05b80ec6b4079d0be6a4b023129346696b04cb5a90983c08c45b7d3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-alphard-nova-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d124aff39da9d10edbd76e65c207c1bb625940619d25f3d00674c4c381c61ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185966 Malicious code in cache-norma-protractor-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e22a028f41addc99f22b1226c3465d0e27a43c7438538f39b0d1e19d26e153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185627 Malicious code in async-psi-alpha-query-theta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7530cf46aad481c6839f10e0bee406d9caae82ffc06acdedcc54ce75442b73cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189967 Malicious code in transform-pegasus-await-volcanology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfcde636d0dfd289fe2cfdc5ba798625e060a28cf43ffaa3fcf7db288428639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190291 Malicious code in webpack-quantum-babel-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980725b9c25bfa17ccd89e3880bb009f8c98c783a0dd7bd6e66cae551e1ae5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189751 Malicious code in supercluster-vega-ceres-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60cb3d1a52c671cd3eef17746e2ab0fefaecdac1fae0661779f46f570219be67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185387 Malicious code in adonis-prettier-stylelint-ignite-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c2dee72f106188a0ff5e17a762bbdb0c03f1132107e86b7618d5761be4e285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...