Malicious code in wind-quick-char-yaml-thread (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddce2ad9ae1e5a7ff23e318e9d892e2368904076cd87af82d0c6e57a8ee5fd2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180560 Malicious code in teate-thy-sonic-jital (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01d2c89e9a2aea7b0487b8012dba19cae7e1a6817cde89f7ed675d809590a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-mani-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42088cd46f24ef28accbac7ac56ec5c1c5708b60077d65e2431a189fdca04826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satagi-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8eaf0c026ebbb0b408cea1a964da84a8283fd195f680ebdd4e31195b9d2357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-avonf-afof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca73687406494f319aea337d2edadfe02e58d996322c6f9fff66e3724a9563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175459 Malicious code in kapvino-sovni-gbfffsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb9b8ec2d04bb091a8be44f5688afbb5343536e121987a1a3ddf200d4c732f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175656 Malicious code in ksaki-kaisoim-olonka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f682d07674a0a30753866c13674ca08038c22ea9203960e41244e53b815e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf76116487af3c3d2a2fff74573a6e952a20f36e69fc5f81b0e5bb8ca0e1762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161282 Malicious code in nabila-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f847149e62b6a9241b3c3089d9d0bcfe3b8409414e029212de54d76283d137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bd13af1e86c197c291485f6b66ada474a90329e6cf695a9bdc4b76cf6fbad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoaamaa-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f60957ad638c752b76672b549a2e92f9e4cdb0b427279e99bb8d9a0094bf8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-spectron-webdriver-subscription-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bbcc0430e599d601acbf2f5ccd63513ba9fa4fcaeb3ab76b6221416d6c2a85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148896 Malicious code in ultra-graphql-xo-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7fe9788fc5f85a480b8336fcd4cf110708d0c9494d6b9eb531def9a0c2053f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141872 Malicious code in elara-cypress-pyxis-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789466b2503e28d7ee4f9a1277f3037f1728405fc3f42bcc6217fbe20ab779e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141192 Malicious code in cosmiconfig-playwright-geckodriver-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e69aa1a9f0729ec350a6b2c8b90f2cb561c83d2a0637be9da2edbcb9eebb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-deimos-hugo-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927c90423c37a0e1916c96ebc222fef6f8943fb8899be71e305d6cc4bfcc9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-carina-telesto-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42fa1a3038c1f4e62c91e4cb023c61da6699a0061d554e612399b15b143f684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146462 Malicious code in prettier-cordelia-soap-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34db0d66276bb8d90455f75773ed99baf3815e2d4b00e53033c7a4c971e357c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...