Malicious code in xenon-ganymede-got-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3cdb5311de65ffd938d7edee63411d617e2a115eb667ee052b558090a5c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in user-reject-good-code-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2032c72f458597a497d1a878ab45c562a45d885ad37a471669b14d2c004b3d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187015 Malicious code in forever-webpack-whitedwarf-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f85ce66b9434c76d765850c0f87b8bb5f6a0e8866475ac5d2789354a914601c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186983 Malicious code in finally-function-boolean-refactor-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee4d596d3d5de9024b75ee7f595262969bb1f126b1d3cbf2688b216df11c2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-filament-cosmicweb-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ef3c54e4785f181cf7c10d8c75738e81ad775e2ab94caef427ea09a612add9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187676 Malicious code in kernel-encode-benchmark-interface-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76380f75d8ba6f59ab05dc5b0107949199b7af150de9616738aa35c5715dc30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-robotics-supercluster-sublimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39e2608b2f82ff530582218d014aa91796cfd3a914e2f496c0d2134cf7c5238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187788 Malicious code in link-cat-fork-char-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5ab55b4c3e29acb931e3d95408acd0a439484161dee1fdef22b993a7942071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190177 Malicious code in void-cassini-thermosphere-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4ba453816a13301206fa5ce0d185840b92860d050bfe09f03edf00a9323cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187923 Malicious code in markdown-cz-conventional-changelog-link-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d527ebc303693c9f8e63921a2d125b088cde974feddcfa14b468151078a98007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188025 Malicious code in meteor-hadron-hermes-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406ee3b851ee1ae01cae0c7e1ae0e6a83e9ce50744299402f3c59a7ed7950003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187752 Malicious code in less-geckodriver-mongodb-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73ceaac2d030bd57399d5bdb9ed7a5474907891e0deb0fd0a83c0ae1878ef20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190059 Malicious code in unix-web-export-key-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d60838cb059ad234ae83460587017a2a0124557f3c34684256b7ffcf37b12d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188624 Malicious code in perseus-geoarchaeology-husky-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf0b6bfce5b812d86511042ff2d479088f8af8dd44c9845d780bf4d110c0a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kuig-tnaav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c871d46320533cf44f20ca6345eee76fb7ccc7602d3ef75e794d407e5859c1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-ijos-afafioah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fad0db5d320e176329cd15727176e57938087a605365c21efaca1fb49485c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggadtusafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1b2bdb9819a6b1f4520dfd42ea8333c774eeaa903f2a6c861f3d08c4f5f304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inda-fodji-gigafofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a057030f04fecee9c0b89a16ad0a6f3d1042007d1f9383f53b17508b3afa961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobic-gob-gvatfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5affaddf4649cc66ddfc7c28e170b50d4c8c7adf4967ababcb4dd4aa56ec670d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oliobc-uyg-ugafafiuh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38a7a76244e128bdb6f8341bcb3f0e2a19eb4afc483e1005b98643c8daa521e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...