Malicious code in hadron-hyperion-tailwindcss-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410cbba985bbfb9ca1d7499341320dce8ba4d0f010184701fdba21e7b5b9d465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troposphere-comet-changelog-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b74ff548784ce3a86f53316b5de4200f29c883e33f658fd92f1e8e6322c765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8eabd8ef0a60fb9207674e7219976cda9db0950935484582aa5086ac905614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot-float-moon-unix-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc7cfe0783332584e55e88a0d036771aba6155e5b13fad52b4a4dbaf2311663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugiafaidabafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5781cb97c128d53f47b88a2a1db6c165013590ad6242879520a3b59df97f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179526 Malicious code in anais-papmoa-0pipabamaoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd37611d0d4ca14b13bd58ea8e298787b394ebb0c026b2175107e9d855b7dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174041 Malicious code in divata-tuag-ivioaabga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94115146da8f64f08a053ccc3bc28d2406e0e60848c6fb37f4c4d21c8745e6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fayazhaider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c82e56402ffb0cfb1b3a325bf438b8e941296ce43e1f35c0ec146f1d94630eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167657 Malicious code in teagood-nalikoli97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92b7b9736fcb2462acf4478519d812c7b652da31a0fc3c4fa45bff57be27c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce31f2939cfe7c3f34967014da0bc639f9a027d0095a7456963e4f443445734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167202 Malicious code in teagood-nakama38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0806f5fe0f5c6f35c4c73e2dc44d08e6becb943c7337c7c92b0aa779837d6628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156858 Malicious code in iqbal-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9926c56423a51e9ca350130c3f1adab86191ece77affe210faf64a85a84a5aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166565 Malicious code in syahlan-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c759dbafea0260f5c81d3f0e31d6d3137f07b111ddd7618cfd792b7d881358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153240 Malicious code in avminah-fagnimas-iofagigaggiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e51e489093c975fabbb957d50d8b15f1fd2065b508bfd284f9561137f189817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranefufu-safarai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f7eb5391bd412b4177c7a9c1203252f63638b6b317927b6779ccfdc7678dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-altair-native-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-init-protractor-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032e8238a6375ae58cc650383f15b3bf4e597ee8fa88e72398c702acbd328810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-dorado-arcturus-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989b710e537fc775ad4d9598cd5612ba8e23149980fb376951978a776fda01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147639 Malicious code in sails-concurrently-css-minimizer-webpack-plugin-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4e5cc17b6921b4f1627fafef4b139df5cac2b0f07cd37d26c90b68ab19bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-otak-otak47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc59da9c21ed209cb5150d9b2fafb0647e550c5c159ad84c696b42de2ff9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...