Malicious code in supervisor-config-hapi-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7ce5ec778c0d8a09caa214fc9ed62c9222306281fcc29ee88e7c4f779e7806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-karma-xml-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0d2d3a27b749da169c991b93d852c67354e41e03611bad2d5b9db3647047e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in route-permission-grep-quick-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8522859c4db4d599c66d98d969c343dd68f5f7793b0ef4885860c6f1705ca7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-biotechnology-xanadu-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252ea35406402f4bad38396317c238088ec6afcbe8e5aa922bda36ae0b271afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-nova-titan-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea7a868756de9bcc6a3ace304f91da8cc120146b8b0589d6581391a679daf16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02a5aa11d22cf97489823152a632b2494558466c81b352b58380b9d679dd3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50342f66aea54d13a2bfba5a8069396f221e278212a13e5a0002e74b7786f422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in import-uglify-shell-assert-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50bd88fd1544b70a1e57fc9c10d6058a210842a8d2f61d9caa28c034c05fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eigenstate-ophiuchus-sociobiology-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d559df9f19acd3ade6c6cf4782d283afeb12dc0ef2bb84865475b6cbb34c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reject-process-link-cat-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18671929c4016cc29cba962cac20c100aaa1256dc85787910b9e4a7a877dc285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-terser-isostasy-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d590435965fd0d4709f2a296b53d67c019e8b303be67e195da8cf4cba2cfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decrypt-sun-mock-rain-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d06f22646305412a369e98d2bca79aa51a5c48223ec3e26e326ab67cb75d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-perseus-mocha-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab6606c12f1d8a31b4ffa60bdd8a08643e40c577af49e628586123bd9d36ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in class-debug-private-decrypt-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a04a06a34b2a6897164af73ecf02e450c652a316afea2fa8968c84edc0726e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in omega-fast-xi-node-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d063debca30b371ad751d91f206fbcace60cac8a3409db0989f84de55d1cdb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scale-deploy-pi-simulate-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fa017a28d30b614ee50a0a757c91fb23576c9b1ed146e6df71f8e508078a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-auth0-delphinus-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3d75c84533df7d7cbc4e6990cd81f583a0ee3f1095671e9cad2c2b7ff44e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185500 Malicious code in apollo-dotenv-parse-variables-stratigraphy-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b6bff1ebc61f26c983aa31d04f318f822c5eb75b154187650b15d6904971d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189763 Malicious code in supernova-dysonswarm-arcturus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb56d71359f955d83f68c2050ffd9f7e52a84eaca18c226afd9b2e5225844e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...