Malicious code in inquirer-quasar-polaris-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2a0e0cba4ee0cc5cc0d94f2041860ea8aefd600a4acdbbd29641f201f2a0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185553 Malicious code in areology-darkmatter-ablation-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfc4db01117ee624ad9404c0333c608488382abb48fbb690352e94c3f4e111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188714 Malicious code in pipe-auth0-barnard-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b3b68d9a0c694ca31182e0583f4bf4ee987574a2c4a765974633b4f89dc72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186628 Malicious code in dotenv-sedna-inflation-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a63ee5fbe8c7a17380d2b2176b6e0387bba7788e959c4eb1e36dfa779195d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-quantum-csv-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9909070a68830c6d663c79812a272f46e552253bfb360b94ab3ec3234e687778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kots-uyaidoagibajb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c68c5af1d045eb717b17918fae36cc8c2502237e0ddd9a7f037925477fb988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lomi-fis-fakugb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620f04e87ad1df634f77641bb527f6e6e2002e99dbdac7976c4a56af56a3135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184833 Malicious code in poliaoz-aiksgsdfo-alfdadgsdion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cf8764902ca00b878c7a9a823321c1e98e7cf995f29d54bdf31c48ec11f585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avmniab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2015af86c721ef08029d6c56aec7345b176eabde43100190cbd245039fd72de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-kvu-ibaibuacamuvaavua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1107467b2e93ba697edd8739c6c16bac6f43e97d0c7827dc254b6229f46064fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiudt-acog-fafiufug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42fc95a2d78c0efa716ca01c0dd56ec4121709b43c877684a3ed2f15cd2b52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181119 Malicious code in teate-thy-sonic-wutlu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9afa5b8cafe466c49cf7ea5557ed4cabf946426c1c9132ca6af7c46570446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177402 Malicious code in poglymer-ogmih-avigpafdoaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34a9c7ccc03e11056445b7836b7aa443c5689db817b29cae7931691b98eb15eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174090 Malicious code in divata-tugai-imifua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca887ca7077a210176a260bf5e04e7eef9fff487b32365fc51973e82ddca473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177395 Malicious code in poglymer-ogmih-avg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dabce243a39ce99ebd978312bb2664c8e52ee96b9fbb9ef2c1fd6dfee457d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173072 Malicious code in awaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b7cf2abb635cf863a6c49bfe0fe688b53d721a6ff8621c8d9ff4b8473ad59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tanabufir-softafai-dugaabuat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669b8b2a9fa26295794e7a73236cac479d53e60d94a961ad58e388c22c9904e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172230 Malicious code in augis-podr-guledif0d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f427ffefe9b72a9644a6e7edfb84e7b44f2b856ff56a8e60e3fdd352c173dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172056 Malicious code in apasih-led-pok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae05a0a954977d18ee94aaa1f4042f9bdff4a640051eec0f21b41b829204fa2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...