Malicious code in lyra-warp-dactyl-interferometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0443e66fbe5e2851fc2339642f366487cc1173568243d8b77eee088e5e787a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186588 Malicious code in dione-transport-astrobiology-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db00f98de7eade5747ea89fd288d9cf3c55ab2e83b1e222f85efd13281d9d297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-upgrade-ophiuchus-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a0e7ea27c39c0994bad0e12f99255722091fc3c0df8286c617e33cbe7a8d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185952 Malicious code in bunyan-spectron-webdriver-less-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea996c13b6b5a184710be958777615f73170e5e8f3a5e8fb00260064a7d769c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-blitz-paleobotany-decoherence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43637647ec10057b71123e304940b13b2033812622a4b8310d8e491678fe8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-transport-genomics-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a961479210925383a0fbf886ccf1a83d0b482d132a4cd67413a4ef5bfa053292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interstellarmedium-materialize-robotics-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c99ad3a387f8afc1cc5ecfb4101a13af00275fe29c4b0986d1f03c8d44831e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grep-fire-throw-web-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf7689d3d15f023a0d962a1dc51e8ad684feb14bbc8cc9a82f6b8716822f137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-alphard-convict-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33c2a363ef96b131f8808426949e15ed28221d6374dc4b5c021fcd973e62636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189280 Malicious code in root-rain-catch-sigma-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349fa5e6dccd1932baea7494697034aa3d9214462fb6016ff5e68a1bf986fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187484 Malicious code in innercore-magnetar-xerxes-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90a43fa256d202c4b4ee74f02897d32a09d8ac876f289dd3ec2a3b0b4255285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oig-tmoeaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6843a13ea8be8df8f4c442a48cd4e7706eaede556b23ad18dcc8308463dab687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-ibabavfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9903841c35b08e6c4c65d8da4c1cae845152379013aaa2c1c416e4a4f09d5c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184225 Malicious code in modasiv-kuvu-bavybu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca077f9cdc45de8cdc9ed8b1586f1c2a97960f66b50fe2cdf626c15af78a31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184057 Malicious code in mitokoik-oni-oladis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac88bbccdbeddf60c68bd4570d41b4c27c83399d21fc4f0ce1980e455c0f240f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181283 Malicious code in @akunsansan0/karedok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8002834ffb5b2a795e730681a6f3acf6b237f10b301970add5c54d833d41ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ivare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aff9f5c9b4ab2a3a130e72aebbf5919a699534b198b0e8c105c00c040887080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jiaklai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa45a4dfacd838fc2cd702cbd0da59a467611a847bf011fd285ebc11b4fcfcca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-suninana-mando (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c807e967043e62d09ee35aa5d8194b6e9c397604d9414600feff1e37bd0d9549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogmimh-avigpadg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c31056aa7c9fe5ae1b87001687d34695b22998fc60429b3b5d3324b3c43ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...