Malicious code in webpack-less-heliophysics-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8987f4d7ce795a5f2186e61fa899436abfaff67309bdbbd27646c1723add64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180435 Malicious code in teate-thy-sonic-gohgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75bc7f506fe045b87ea7f9441e2dd9edfdddafcff8e699c2f93a8f7093d625e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ramjak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2095c16421ce579f4e386ecba1e0e8702d97973855e25cb8028b42b1d83c264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178504 Malicious code in sahuar-satidaf-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c17e9f2440627eee20a453de577e44ec657d413bcaee0e9748e12d96f5a7f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luvami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b51ccd4103bd23d91f44db43f692d7747d9d557e13a2c3c6a551e37b087be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50b4cbdc3fc2f3ddef9745dcc1b1935452db34328cfa924f0b31bed00672b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153449 Malicious code in avminh-afs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018d15fbf9a482a2e882124e01c25af3e57fbe5dce6995b5dfa0c2a919893e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167291 Malicious code in teagood-nakamala28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78818c1881648df9e91b95ffca2e10312b99632a7c9c9581f3b953ec519f4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aseszwasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0c5389e5a5ce2f85ba640336debe4b4a0d0d188800e636400065fb9e2a9994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155407 Malicious code in guras-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26cdd68546bc062dfc11deff17cb83863d148eac00cbca8d72806a59bf4ab39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-bellatrix-postcss-loader-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f58a61a1c9e7b168034026bd7f3fbc855466854bd12522712eb602f4b62e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126915 Malicious code in gita-tapai39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bc7b73742ad17c2b8820e124036a23c5ad445640da420d894c0d0712e4ff35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119891 Malicious code in fadhil-kentang4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f2409d6ad19467cbc689830c4d6cf2104151f5fab7131a18643954544d1d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120403 Malicious code in hadi-ikan19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a9bf2ccac0dc3d934ec0d7f7dc09ff19128e5bb14baf6d4ab8a6b449cd2aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114638 Malicious code in historical_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38293329472cdfc094f85a42d8ed349a2790b7903ab5d7c90570979bf867e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115685 Malicious code in mahesa-tahu39-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a241fcb388c66fdc6a2b16c6404b59b64f9901c7b5f220777ad0edc02eba479c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116872 Malicious code in rough_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cd34ff62e4aae381e937324df4b116eb8e1051d4db5c0513be3ac949743a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100861 Malicious code in conservation_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158c92186865dadd98a6d892e676fcf28533b2d3168c9eb7e5adfa203ae1bec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e44b0abe41d69915054e23576c03c4ce82209efa652c2541633b82424ac159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...