Malicious code in cache-umbra-geoarchaeology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b325ee42e9c4fb0b6333f6448be22adc3ef9fa102f3529f68c8eb58d077bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-luna-indus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d865a656c770e023fe92f67cb64974da1cbe3fb0141834bfffd8c86df97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-capella-janus-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c833040778b208833172be98968dc0d98c708a39a399c3fdd27d8c86303fb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187698 Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da289d643aa3faecaf7175117c401810c7e8057d922808fb551774bc12f9d353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189007 Malicious code in quantum-sirius-spinner-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009730042d0c36541d7a9147c37bc383153c82e0dff8575f0337d20d263c0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187626 Malicious code in json-miranda-karma-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e21153db14daaf54497f5b3ea3e6b717421a572780efa5d938efdcb121cd30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189308 Malicious code in sadr-proxima-uninstall-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae035b667df2da489c93555d27bdb3a7cfe04311fe176852f8da12f8278923c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189149 Malicious code in reject-process-link-cat-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18671929c4016cc29cba962cac20c100aaa1256dc85787910b9e4a7a877dc285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187785 Malicious code in lightyear-cors-quasar-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429afdc097b789886b2f73a40a1eb7753fceba27a84af51e06977ae222b5f0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185877 Malicious code in boolean-double-benchmark-star-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12e5c0f3b368d68a8ca0642ddefa6f85ba5d3c3f8a3c01cf6b088c175dbea41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kifuni-ufbaceuiacfovadfhjodmux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bf1c392b7d6f1b99604f37791fccdb16096401e4dee04a731928a478bbf8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182060 Malicious code in flights-tuig-alakanjiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7b2adbcc7346bb432a536f02ca7adb71a620b60a4a5874d8b0aa445ea61990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183339 Malicious code in libc-ug-atag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45fe92289839e2b295d452a65ae4208dd084b33743c0b7ef06b4b8b9c087240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182445 Malicious code in imodiov-kufni-acumnacffgteafsgredcadfavfehafeabfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64d1699c1dba571f6ec8bd7f5df1fe7a4b6aa94cc28d261efa65511096f0578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gociay-uinaga-ugugfagafucfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6e7f2865861e5bd7b5e33eb79c3fef937f3294d082ffefb6b30f603839786f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-ssfres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29dae9d62376035746c8b57804f56d26d5626ec2c4ceb05cfd29da01ec89af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-jos-aafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf93ad103a765f619a5d787d008a6c1d3c171a33b553a2078e8f72439f43662b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-akontolbapakmfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b823a9978fc24e7cdced02302ea5d983e0f0d4d257360a549bd22d2a34b285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-koifi-cuidcavuaompmg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1f42d94351c018d6b19c27a84465fc969b212d4441d0a019842f7fd8140c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-at-labieoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b080c8a6352d1152a4dce40617d2a1fdd339bd7863fd683a647aa7630d1b21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...