Malicious code in container-tree-signal-notify-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71d5038f64d6e372dc504ee04667b316a274a372b8dddb45c2cd8c93fd779d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-betelgeuse-cluster-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb57bbbc9a884ed88012168304d88b19e1f4bab7e0e6d256b469bc2dcf6645c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-cypress-gravity-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35dd10a0b5c8d4d8b08bd196f82196d1f827f8aa2da53cab2ce753a17487cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-nova-readable-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519472d81a3bae325559686848d27604cacef6d3088adabf65c3453988faa0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-regulus-brane-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d855c15514ea55fd35eff8ca8279a4ffff51adf6a4d33e0ad87569672a1d357d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeta-transpile-encode-pi-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372db48429838467fa0be86a5ed9950434fe7964c97d1b228a5e6ba64fc23ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-jsonp-dependencies-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5371fbf950c99d96b08240fa9f1145f24d3a4062427ce516eacafbaebe39885c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-phoenix-rest-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb399e61ec78cd7d61dde7ece649155031041bfc66b022c9f0ef12e3b509ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-warp-farout-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b58f1af8bf82671c841b76a10d8e68246dcd60737603893aef17271bd3c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-terraforming-commitizen-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd15125e8c1240c99c49d55043b1c295bb37c7620ec8c2e54627a6d174b5d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189528 Malicious code in slides-convict-husky-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69738a724e0092e0205d6285478e0784c458bdc90564307ce801699beb7d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187440 Malicious code in import-uglify-shell-assert-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50bd88fd1544b70a1e57fc9c10d6058a210842a8d2f61d9caa28c034c05fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187702 Malicious code in koa-vega-zenith-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a04af2364592a4dbe9304c1583200538072652b566a0c4367ccac8e31b977f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188409 Malicious code in old-string-protected-omega-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b4c6b9e02ae8116c384e78de29b120b55757d7fc40c59281afe45f6917f764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186472 Malicious code in dagda-ophiuchus-koa-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59370b60f2bcbd1ca331ddb9e242a52c610a109777bc6254e561aad327d81e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185987 Malicious code in callisto-europa-buffer-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f44ccada191c2458e1ca5eb15a396e16cbb99112184ce38c1fe81ce1a0e4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186929 Malicious code in express-standard-development-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5bc04d8d15258188de8cce44569fa6199329f7f2dea755b111c3ea45a08172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190336 Malicious code in winston-lint-staged-ganymede-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964fa62b6be534e55034d3bb600bcaab53ab3dfd3be346bd6d3534cd63246be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185578 Malicious code in assert-zeta-visualize-data-char (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf70c747e8b5236dda3b3cab1f3c6287cc1cca1e6a49f13b239239537aabba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187114 Malicious code in ganymede-tethys-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404215b9a56b2a2fb508a19ae3dd7a8e028cd7ee171394ea28d87123eb72e07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...