Malicious code in pipe-resolve-signal-uglify-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c40780bfa0a60a0f11514d456c9de6b44db34fb75557dcc422ac8974ca8ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-spawn-leda-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7a1045067738f50113be83874dd4bbe0afc4ee5fc89b8ca6d1f619c3760744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-local-bootes-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64a6dec662b35954b462c22e6a5bd9d14a5452fd7ee1386da7b709d78a68442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tachyon-mesosphere-spinner-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0199d4ad6da5ed57f1010cac95dc16558ece4d84ae6e6c6fb857dc52e6c6370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-mongodb-astrometry-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d91bb98b69696c0d64838fcc70a1807cd0481ffb5d3b10c23c6c4e4737ae29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-centaurus-electron-builder-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeccfb1d261c6ca7989d2be6cee1c0b020d5eaa19f8a9d0e008e8d47573304c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-nova-readable-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519472d81a3bae325559686848d27604cacef6d3088adabf65c3453988faa0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-yakutsk-dotenv-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d751656f2ac7efe86e47c25583f93d9ae1536daffdceaf849d3483681ba1dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redshift-deimos-neptune-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f964324bd6752b8565f81793c10d0ab91313d89d5665605b85485952a2a4c694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lambda-daemon-cron-delta-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fb54f754c0ebae3c47333aeee6383f8571f97acc80cc251881087f1353d280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in void-cassini-thermosphere-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4ba453816a13301206fa5ce0d185840b92860d050bfe09f03edf00a9323cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-proxima-sedna-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d0b9329c538d56e5c03a9784fb71627128b7a5d0af3687c492dcdac386fa18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in code-interpret-finally-decode-cold (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda77329400e2d6d937de5ec4642461363583de5cc3bc09ba36c5270ced52d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicweb-leda-sadr-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270c6cc6b73cca0763aa3fd40890eb81c4f654188eaf7bb4cd3ceb9ded2f43e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-native-centaurus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6dce8f7485566682baf52e3ddd7d582e7a2d2645f17719277ec2beaf0b8c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whitedwarf-inquirer-csv-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d750b9bdd14da059ef8cb9f7ae5a0d0de018cf3ce9d7393049e79180ca28bfca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189679 Malicious code in stratosphere-spectron-webdriver-deimos-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f856118b60305c931ff0be82652330587068fcd0b791ec496187dd214c7cf5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185779 Malicious code in beta-enum-notify-view-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bccf3f703fef5887b6554bcd18352453f796633476d23cc246ea564274a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188976 Malicious code in pulsar-run-script-process-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68b094e7ac4b5b258bca7bdb56f33a009ef457bd35abd4b0bfbd4a72681e437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187595 Malicious code in java-theta-theta-zero-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de583b65b57ab9087f465b92bd3ee216f6f2f543c1cddc1d8ae174441f641f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...