Malicious code in double-decode-encrypt-cache-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd120085360bd941b6b618bfba167ef9076e6663bd3af7dc247e1b7a6588f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-publish-vortex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce85812e6fc46ef9fcc86a5c7993e6c77bffb1288c327defb1b194eb04254c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-aquarius-weywot-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30996d68f5a3eaaa198028e609182507bbc8d9d2c5693f797f51dc0ec35e1c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-lacerta-entanglement-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16642552a6d597c86591a4a1cbb8f43b1ad3684cde6618a09349b8f72810b1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serialize-short-grep-async-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae04f6ab05f55e6390ef99711079e5b540193d28e49c1fc67f9881e00a48a995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-publish-hexo-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00717e5974b423da54268e70eeedbebfd4bb4bf7ee91f3dd7e0b29ca6d88211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-rehype-xo-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a51f0740e1612c51322e453536c8292d2bc79861076bc5c2b152821856564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-commitlint-panspermia-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0aeefef00ffafa72eff5735fa1a8801352c9e4c828d148219678c1b24d15c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186445 Malicious code in cygnus-winston-geodynamo-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadb263448d04a72e1a9d5cb278030b6321c2c69658d7a6e011fb6c8b02926af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187765 Malicious code in levels-convict-json-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6438dc827ab933a352eebaba9c7906df80e3c4db8cca52f437cbe79dd92c0688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188111 Malicious code in mongoose-cordelia-hawkingradiation-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac29acb2d20f00029ac7d544cba9f2a1988d23b897f9de38df6c3977ba69ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189647 Malicious code in standard-frontend-glaciology-selenology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff8d2d9116da16fbde5a2392699bd79ccf9484cb2148905a7dab7fcd8c8fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in star-private-minify-bad-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c073ea8c71ff7c1c682370bd5c071b312cff6ebdf04d0b7966fe8d9f0e529a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ichnology-eventhoriz-grus-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51a1a006f545ebbe51221eda4a9f42a389b1bea53ee46c760fbcfd9929a62f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neuromorphic-corvus-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d42f67b16998e8372cfb22e1d1e99a0b3b90dff290d898c756114a21cddb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186102 Malicious code in chalk-resonance-triton-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf63178531eb1e18ec7be76ee8d7757e6690fecc2d546232fa954284ad7bee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189483 Malicious code in short-shell-data-private-bash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b7316c8d5324f89c708b06b8523b6c7c30d7ecf843ecdba78f78b921ecb7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189071 Malicious code in radiometric-nova-rocket-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca38aecb47598dcff305898e0ce7687de1ab15863e927bbeba1da96300fc7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188071 Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0159cd9626a0e52af757ba48b3488f9f060a2af1756b874ecfbd0ee5361b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186516 Malicious code in deimos-iota-luminescence-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2829516c5ce8615b2a59e4a46d3506efe33835b6b745515c481d71be3483605c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...