Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c99fa5451f2cc2dd0102d63f87d4f740d4e78005ef2ea86783a16a1d892269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in throw-uglify-old-spy-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1384ba57693d772926659c64ade30837da4880fde1b05621a4e5b0bf482469d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-greatfilter-phoenix-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fef736544e30fadb402cb7b6402550b518cc7aa3e39b4f61a7c8a76ff03f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190079 Malicious code in update-proxima-isostasy-archaeometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac93addf5705ec6be9762a965b872ca031400f21168925e440d5142383746b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186582 Malicious code in development-warp-geoarchaeology-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c840035c07923c4175839d47e43684ea33f6cefb2879b9b69bc767d9eb50c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185495 Malicious code in apex-tool-colors-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c62893645bd2284f60d2079d955465a378a688d945047e235e72710ec44a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189439 Malicious code in semantic-release-boson-lepton-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb5355d7a6caf4ed4524b31f706aedd024df4b09ee0659e35613815b8d89df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uyaidoagbajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde5b8e4169141f47119d2245393d028463482227c81b29f0999e27d44ab0712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ift-diuhgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2a7c6fc6183aa7f09197d567126e5cc9c2323d4f1173ad451b08a732200189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kofi-cuc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90863871202809f863e22fcff6fafde6e0d34a59b688294784c84ff57f7e4333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kugfi-comoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640f7213106412e8478a92243f16038b2531d6948bb0bf16a02d81bb61b1a257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-ni-hujikakibaaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619f8b325e5c54a116a1760ae11b458f84baa320605fb3fb40305f8746be76bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunise-kit-bogavotaawfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a205d995a596dcc62e666ca040d27dfab0a5f2c7eb4c42b9911cfa803e4ac13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-idav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a646024d841c9ae435d0f3a04dc72292006f5590e1875ddbbdc80142ffa849bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182782 Malicious code in indea-fodioj-aganafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff39a4c72b141dc629d397c5a80b698f6ce2dbf98d9edd2c33387b8be4397d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuig-adifaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7acb1f2c077462f532cc5d4c171f3623da9cfe70dd90366f196d2a707f8985 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokmiuaasnla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb590d84951f8fdb5dde8f11d1ea053dbc65b7294b7003ce75922284e47a385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oib-gisosag1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8edf37042276315bcc3457364404f2a39148110cdaf2ffc712af76ed75042b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181627 Malicious code in astam-ifst-diakavg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015568fc551e0655d4f3231f5995b8d6c5282c0c3220acf3a1a07e119b71c98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183790 Malicious code in masolv-avilo-civbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f03d3a93ae2c598885dd37363241a88a780dd0b7a3bcf86bdcd9b364bbdc74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...