Malicious code in spinner-uranology-terser-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da7f5234df5681f13b658fb2fabff25e4b06dd41215f41a2a1bdc11964a46de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in string-avior-heliophysics-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7ef6f68451c5fa51ac41295643a67cb2a6c0437ba9c76305c143de6da7c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189100 Malicious code in redgiant-cypress-mesosphere-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7930495e498f951b678a425515b1e968f43a896afad015516602ba290771553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189531 Malicious code in slides-public-alphard-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7de09261f3144209c646b5fac5d76328042839266e5a56a0daceac2a505688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moki-luni-huojakiavim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48a58771c310669340161df13627c55ce367ceac5c917e8155406c9251abdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183681 Malicious code in manu-oi-gisiasvugo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2dd7291241425b1a962c16841c92cd702e35fd7eb3ee1736f0efc00d4daaae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184273 Malicious code in modiov-khan-avcafivd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b1df911e9451218a2eda33fce673b8786368c82cfd2ce2c81f3ac01852275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-afidu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617766572fba3954655dbaf9ecf4a9fa66c12b46027ac37f7709675a8cf031d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-wajfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b38e47c8039fff830ca40c0c51658a6d4d31a270423f735a41d702a87523d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fipajanoa-inafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54f7dd150018d115ad86fa8a71a6eb9b785c6b553ad40a83a54004a94176dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a417b90c66a6eb188e18aa86983315225b06429cce83b9252531905aeb9de83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bava-muabadac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd1a53192dddc2e9120effe25dfb50bb83ff3d6abc2b017424d745f95fb7301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-amar-afadaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d005adc004507c3939a1defa0825cca618738fdaf7740e3563f6262de0d213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175058 Malicious code in kaka-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a929c2176564a4d33a26cb112ca9119f23b3f11d4a9ffbbc1de803f0429eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175690 Malicious code in kupaio-kia-jakafafswafofoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce552ae069979d367c5c9d7c3a1548aba51f36a80cdb3873b15a348efb97786e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178886 Malicious code in teadod-mipta9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1158e3777f5daedd1980d213e0f7cf3f1b9f7f8956a72a72544adb9df3d30d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172411 Malicious code in heres-matinla-uinani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c8eff1e474153e8888b3e908433547274b0f3a47a769118bb84ef25c3b5ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/weaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff0afce15f8d925e080df27a62a41d3ad03ce29931b042ab892ee64eb4fb7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77151b456ed3fac045a35b1a85e644519b65299e4b345a42d8c9933ce27b5b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff37ae0d3ad556e4bb6ab543cd07f90363fcd139ecb9fb62a34e9df609f9b45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...