Malicious code in mongoose-convict-kaus-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b09fc991ece735c5ad822d0852bd88f8995b904d918263bddd714059305096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189430 Malicious code in selenium-dotenv-parse-variables-gacrux-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eabd6b3fed5bae4e1756089c92269eedb044ff497d1eed1b91637aec3bc9a872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189102 Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d787ac5197bb2ccd0791295222d1fa188d9eb72d6140865139d4dcf028fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13651cddb72d88d40d130ef673d4dfd17b3bdb6c26fdacaaec5f56b525b6ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naumanabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6d0b39282c10df0627ecf09cea5506303f628e33f57e609aa6eb05a9cead1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150509 Malicious code in @miptaa02/argf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b169ee05810b742a520e0f91358678ebf9845880654e2d59e2802a10ebffe2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151161 Malicious code in aben-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9fa32c8a3280dbc1d52ebc24f99df8da0c08acc139e026bf2fb1cc54eca3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168612 Malicious code in tealove-okta34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273865679a994b85588fdb5af50bd49bddb0eb7e37807353469b01d7f8c48a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139731 Malicious code in auth-tethys-duplex-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5118548c8190c3f375c9f5128d029bf31797ee6cf9feddc4180b3f4efd440584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144115 Malicious code in karma-phenomic-standard-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e33101a4daa0982432ad2fd50dddbb6bf3d524f23b9ef2235151a69c67e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144596 Malicious code in lynx-node-sass-hermes-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4cb8743405da734d4d184d2310cc39dc588330460456eb82aad066ff03c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140288 Malicious code in cache-webdriver-mocha-await-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f55477f5f0aba607789f41297fef61b36fc4466909c98996cdad86e985a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147147 Malicious code in regulus-geckodriver-apollo-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86803956b94c8ff513b4ef9bea65fe82c6737e4b0244a4e7a7456162559bd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148165 Malicious code in spica-link-iota-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3505a2955823677a1410053b48dbc5822ca4f4edc06b421263f3f15fda0f33b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-element-ui-hyperion-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5038fe2a3c36f89c8648d1958ea6266b9e56a0ef60f2efb00d26435c3e79a2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145563 Malicious code in nodejs-eris-izar-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec39bcaa70405a0938d2a98f119d5449f89a0e69773c050500b6743e68c8f9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147602 Malicious code in sagitta-link-cz-conventional-changelog-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb351a808e39fe6ca52c7d529df120e541435ab8307449414163e7ee7d6bf623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-peyek86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939b34d4c79456da78ac7fb111608d6cd19ae136330602987f5768617a3d5056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-dodol24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5fca564bff1edc3aa6214ef64205f90ef1c5b0df87d774d864c137ef11aa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a0cc6c25ed1f0c50627a9e0bb1cba726f826881a03dc7e05e8a592f0c8be74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...