Malicious code in public-dog-secure-user-omega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b3ecbfb521f54bc0a2e5f288dc76d1fa2de219c9ce457fa24196b94a7abd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primatology-algol-postgres-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013c6424d179894374a2287438b3d3e54683c76bd6bcfc312e41d2c1f7459f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-socketio-concurrently-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e912fdb2bf197c65c430a9c9fbd0f8051136d3e5aec231088a303a0882b680f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-dactyl-publish-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e0885c4752a431d7ef0c7c486161540c316f43b132e783036e81bac58c1dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-async-cluster-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e22371ae33978d78ed8ddbb073e247ae2bb8625f6d9ea550c75707b6a451d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-alert-hash-catch-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85fc5860c00474af9c73797df5baec4c6920cae1896fe84f084c86f57a23547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189304 Malicious code in sadr-janus-apex-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59c744fb77a2ce736381b7ec08f3cd0b18a638bc3d4bbd5ef4848fb1e89dde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185737 Malicious code in bad-old-deserialize-bundle-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdce2dcf4be67b168c96fb9a58af64b1b400ef7ee5345b993348f76fcefd3c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187047 Malicious code in framework-rimraf-buffer-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd7bd0d93981950b7dfc97b285205d98122fbf996356148515702794779a01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189190 Malicious code in request-planetology-lynx-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fae2a834303dc8838a8122b4966ad88db8a5647a67dc7fa47bbb5dca54db5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186964 Malicious code in figures-duplex-magnetar-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eae1d7027882b6a70265a27433bb8857139add8539583e992546d667debca8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189705 Malicious code in stub-scale-alpha-epsilon-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75f8b4a809808568e4e6cb14303729e4dae23ba42ce8fca5522267fd3e6f2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185473 Malicious code in antares-procyon-xenon-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abddecc25f1220eeceabb1fe7418b88ec3fc540c529cd4130cf53050d96271a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185593 Malicious code in astrobiology-sedna-archaeogenetics-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df4d0495e148fbcdcc1cda0675903dbfcb6d71102f2cf4a590110f50a21230d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189048 Malicious code in quito-config-lightyear-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2774879e2c0a7ce0d979c45203cd24a0201a338f4a913577244ee6c095d46e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187290 Malicious code in hawkingradiation-carina-oortcloud-gammarayburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97d0329ef315d745c6d59c59e0ed8f4aea356a6d3857eba39f4456b4d6ee703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189504 Malicious code in singularitarianism-europa-spectroscopy-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbcf21e8228fd9e543c8d29d6cec97227cb7d7ec7a78be07db67bbd5b7d813a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189399 Malicious code in sed-float-bad-void-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5126830f08c3414052bb9e255acb3f6e710990f3876503be68642689c721e9e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187831 Malicious code in load-protected-file-index-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5faade79c2776328e1710a3582b6ad746e9fdb934959e0c3bdca1c6f84b929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-blitz-kardashevscale-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4011abbf08341d1fb7ee6940821bb4f174b5d2cbc04bc0d2b44148c74c88e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...