Malicious code in mongoose-convict-kaus-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b09fc991ece735c5ad822d0852bd88f8995b904d918263bddd714059305096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189430 Malicious code in selenium-dotenv-parse-variables-gacrux-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eabd6b3fed5bae4e1756089c92269eedb044ff497d1eed1b91637aec3bc9a872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186263 Malicious code in compress-tau-enum-book-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 011955a099f66e34708fb647958242177ccdf3234a3a83ae84802211bc3be1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189102 Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d787ac5197bb2ccd0791295222d1fa188d9eb72d6140865139d4dcf028fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182726 Malicious code in inda-foi-gisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcf63da42f5a2ad7ffabc3d7bf8f13ba93b47a5c1bdb069234e2626ebe4ac83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184905 Malicious code in sonic-jos-afisigaafoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae387b255262e50ab0ed595712ad708c3a6fe4e6d747de604a3ce312d8a56d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haruni-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13651cddb72d88d40d130ef673d4dfd17b3bdb6c26fdacaaec5f56b525b6ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naumanabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6d0b39282c10df0627ecf09cea5506303f628e33f57e609aa6eb05a9cead1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159192 Malicious code in makan-aigoa-ifugafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2761a133ab1cc470f8729a4b38590136b33d2dadf3bd90b8a1b637d8f2c3114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162249 Malicious code in nokire-akaza37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ba92e1b8504d30a994cedad89223f81b4d92c4d5ff6ebb25d9fde869a2880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168612 Malicious code in tealove-okta34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273865679a994b85588fdb5af50bd49bddb0eb7e37807353469b01d7f8c48a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151161 Malicious code in aben-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9fa32c8a3280dbc1d52ebc24f99df8da0c08acc139e026bf2fb1cc54eca3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150509 Malicious code in @miptaa02/argf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b169ee05810b742a520e0f91358678ebf9845880654e2d59e2802a10ebffe2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164222 Malicious code in piluka-ali-bicupaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c622771ca8b3a9918771f607ff318ea9b11bc54ee8d57921958a4718cf1bc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162378 Malicious code in nokire-arhani63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4b4a3e3637dd2f045f98d452686a46a9a126ea2703e5494655955ec86e6d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159635 Malicious code in manda-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bd306c1a438a6dfa5031204343e0c0e2425c8e746d539ee834bfb670c21704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-cz-conventional-changelog-loop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32def6e54f295429be6ec6c01f65d319ae3db26c400298a888645b4981e893b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-zephyr-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2635991b7d8ec4de019d0f6887e3fe94ceae95748053607f691bf9178543ef21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144596 Malicious code in lynx-node-sass-hermes-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b4cb8743405da734d4d184d2310cc39dc588330460456eb82aad066ff03c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140288 Malicious code in cache-webdriver-mocha-await-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f55477f5f0aba607789f41297fef61b36fc4466909c98996cdad86e985a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...