Malicious code in local-cz-conventional-changelog-cosmos-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e458e633b542e7ffd2b0e112aabcc898fbf435cc944028d735d657c238d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicweb-sedimentology-ignite-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244a8086b97b3e59695f91b83a0a171f8762ba34756d6ee338d98344eb1b1b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189127 Malicious code in registry-local-biotechnology-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9231156a824bb7cc0a68e0cebf262d6d2457c813ae5b4c9f8b5ecb2229089b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188614 Malicious code in permission-permission-link-monitor-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d431a409565d9e8eeb792724e8d57bd258eeffbb797a03748a52fa0965af76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-scripts-phoebe-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e68c5cc63ecf1236bea18be4d8e0efb1e70538e8a54dd9d2010f86fbea1840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186274 Malicious code in config-dactyl-foundation-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de4251893f8cf0b528c2444bc8aef33307f0241ae32247dcc74b1eb4c4353bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189291 Malicious code in run-script-koa-json-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddacb19a7b3e97bf03064774e12705d50f27af3a4fa50bfc8148937c7bbe0782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-photon-publish-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb6468812cdca3cbb6f3ebfbf8ac1b3a003fa7818d9ca76518f64c943efdf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in signal-throw-pi-sun-sigma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e40c2a16112d2cd840182125f10235ca77233b407e2bf856c543f547bbbec0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1353b216b9be652df251b86f5fbd1ba87fb50094ee212a5f9118d884dc328d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodij-agafaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb446a20f0c17cf06cd01f4ef86fd758b638806e168985fe5948675190195016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-civ (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df44cee5b960d16ac94a8944b81b2c78b09b98abc3197087b4d16f1c189373b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185305 Malicious code in tunis-kt-gabisaygf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c4d3057d60d68ac83f90e9f405bd3f71a45361ea9acb03c86c0da1407c7a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47093a7d8448c760ea60c35f842c7e45f15ea4b3b9d0f0e4292175c4c700ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fuis-fangusaugaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e721146277cdd976536c6537b55933318478eb02f0f236fce07a8f0864f73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugiukatajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14bd06c4c4e4c61766e632aaf5651d08dc0ae0427f99d3ad1179c28245566aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-hule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d04eb8ab94bb5bbf59091db66d912a83ffff2b31e18e8f6420c3128f94a2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179594 Malicious code in analuba-innu-nili03ka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc3350a6b6d7260310246b701415bf183c15b82b96761efe3d8fed412edcd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-faig-dikanamui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06533f9eef6d971f9dd809ff857c88de41ee8646193cadd098a205b3b8ba29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dare-ogoigadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7148b214527ac3a555b4ea2d2ce49d4c1967e4e34022ebec4afa37f3a949a3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...