Malicious code in eslint-tardigrade-gammarayburst-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6ba0986e5b3fa90399d98555fce56050736ff52b31ceb2a66250e086fda217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187258 Malicious code in hadron-hyperion-tailwindcss-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410cbba985bbfb9ca1d7499341320dce8ba4d0f010184701fdba21e7b5b9d465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-entanglement-radiant-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da11391afb2e291ea7a2a769eebd51fbbcd6def6acea5a2870be0adf561196f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183326 Malicious code in libc-ug-aguagidug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e559eb97c28fe0a50eced0bd7920844a7e79e055459340ef72ca941eaebdd4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179639 Malicious code in kisut-afncg-avafeudcf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e211370c45f561a92023b02db59bc4e78e15b5019c9e5aa43da2474ef8ab47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179950 Malicious code in lookingan-nanakila19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5bcd7880f2414a83154acf41974edf5f6e4ef9b4a3f2842bd8cfb5af9e17a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179375 Malicious code in unimunaf-safiaiaf-cuagaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38da6b82688abf4226947ec151144e7e3f0f0725ffd70f9de12d5c5f68f77ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175818 Malicious code in kupaio-ulokia-jakali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d06e4afeb2116a17b185a0d86831bcf73236c1f8fda434235406d7c22f7a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahkaosogjdonanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d9e4cc27bc8acaab72a69c2fe15cf1012940b2c07e35ed9ba5b605b5ca1952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adair-banerdia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79281bff5d282062572d0ef98b94ebdd99d38f2df4fca01f709078f7efc63c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-aajf-rod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ff9e1f0e90bd6109d40516d12f27cf1b6309724457ac152816d2d5e78e07ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malikalahoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf95752b3d1e016b84e626dad5228ee8cb79a7e4f22f83aa816d59d5a8d44a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-foagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee07e1e6e04e969569d740d2cc9e57f487cce7a235437b0b816b33eb22ca247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139731 Malicious code in auth-tethys-duplex-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5118548c8190c3f375c9f5128d029bf31797ee6cf9feddc4180b3f4efd440584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd303f21515f0dff1bfdece8ef5956735f37b53c0ae72f27c2547c01d44b88c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-terser-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd32bf25b58a06b2a70d39b030cfa34a19bc7b9c33000beea84c94963d55dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-lacerta-halley-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a8fa6827ac9e19e9e0a00af75cdcff500e2b579e6e078c205cf56c3bcbc808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-jabbah-eslint-config-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de71c82e1a2e4a20ad80dc25e5b6c01e7bca0ba551494093bf4cfb589232eb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-brongkos6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92057b200a69e29c26932cbcaf8354ac4aae1769547f89566e6a5b28ebc544e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-klanting28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3186fb531c97a5c8f8d341128ac55a50ac9f5e14ed8ec769e14c2cf80e21f0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...