Malicious code in warp-dotenv-safe-andromeda-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a402fc1c0185cf4c85d8102b322f31b58e6c77bc884315de297df083490dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-scripts-hadron-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a24e84819a186d8dea217b703ff05f98103d6410dd24672dcc207f10f2626c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cladistics-virgo-transform-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994bc4952b96b18a4e7942486a5ecd1f6f2239be14f0c987dd49fec7884cd8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reject-await-hash-try-try (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623d2820b9969642342638ffdc496c9ef3853f209f297e48f6c68e39d9ce22e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-reveal-md-gulp-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c9a9ebab25040a460498e03007c573cbb11e115468874f72229a75bd80ab64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallax-janus-deimos-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36fa586f7c683f8a681203065dcb93883653d448d623e0860603acbcf21c0ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-zooarchaeology-achernar-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e463af8410949bae2d25305ef0ed390c33b196c10addcaec3b1db9ef17bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-regulus-bellatrix-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466d3ed4652474b926cfb44ab27373bbae126cc4d987b1c672274fad890cded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in book-compile-try-fork-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a01f18be29f47da8cd809438024dbf979163557d280bbba71baa379a1becc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-norma-semantic-release-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d7b6f4630255380dcea5a3bf2611344de910b5a96a201e142940f865f9cc09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-koa-adonis-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814dda9fc098a95449685bf70ed597eaf7718a69688a6739317f7af0058ac94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-gacrux-jsonp-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7177770d01679691e54cf89dd9dd30351bb2201f3cc0b6e84da2a7becc65a3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planetology-sociobiology-spawn-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e157db7c0e004f3948a95876c03456347236d1cffacb7a03e4f712011774422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redshift-build-geodynamo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb6dba5456ba6db7b6f8b463cbe02f3929d795d4d1027a1cbc0a88a12d75528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in catch-bash-mu-daemon-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31096c13f4aea6a88a542856fb5bca32be9585f83bbf33f7d5e4134637ecdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-fomalhaut-auriga-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7100d241d71061cfad199022166d5a46f9a2ac290b4e0fa6b68327aecdd9f1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-command-warp-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8178667f4cc481bfbb71a61023a72f4c670447ad57a44be40c3aab68de2cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-dorado-grunt-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f11eb7d0cf109b91dbe253864f2c5180d4dd0f625e3fc93c690844a23ac0b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189413 Malicious code in sedna-json-yildun-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acebf88249877aeee58b2a6fc9b09f8390ec800872a4b8211f8e3cc5d9283910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186850 Malicious code in eslint-plugin-weywot-bootes-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd1c916db1f971a732417678b685bfbb98d4333956f25b6febdee70d72eb371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...