Malicious code in semantic-release-aether-buffer-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef5dd537b321d8fe283fd48cc1202163ccbfdacb0405c484311db90efcf6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-procyon-stream-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e497e4e46a9d7a57d90c0c65f94d4cbb5d2a38b38ddbc06eec016cc45c40b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-soap-acamar-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c851c68dc42116afd02c42bc9814743ae9bfc188df787c2b162f447bd138e4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-commitizen-markdown-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53fccb69500874953f39548c3d62dcc571d4b8fb7e15d1fcad2ffb8ccf05986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thread-monitor-async-omicron-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061a9053ababe92204caba04969dab4473e5750eb9caadfb4089a4ccc4449c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187818 Malicious code in lint-staged-tailwindcss-altair-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7fde528fcb735413f5b059ae0d9ccce85ff5d01e66637d1759cb7a0dfd4869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185916 Malicious code in browserify-nodemon-proxima-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8fe0178708beab3a0e8eecf0b864a676279dca80cabc51fa9d0f1f2d2579c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188705 Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d01b3bf19da8542bfc975fdfb7a80d55b99366b0702f190de1439f1a90fa5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188205 Malicious code in nebula-gulp-bootes-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb6b5c7c5ee58afca59f9703c1eb66b71298f71dace2f66ef3181095fc0f2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-rsyyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f63358138fef49fc0efee7a663967c40680ea7cfcea40180405afe9991a8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-uhiagfadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729324e7221625cbbb78e1077eb36803ef29237026421108045c9a2a6de28032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-gahuvfaduuvufafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b394dccda1dbd473bd1133f7a70f5210805ceaa601e48af062882b5ee823bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182961 Malicious code in itale-dci-fdye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555edda1bb82047f168d17585421508efb5eca342841830923c44d0059f0668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179975 Malicious code in lookingan-nanakila5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7f246f93d0848ef33d00f38bbf8852898da1a5c2e96089bd857af0a84d6771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178891 Malicious code in teadod-rsi43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649646acc3e2cf704be6b9c7d425c7ee40609e7cfa2507027c0f214a23904282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butanaih-fafisa-pajifaasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0283335051f47c8dc32fdee54680e0d6d2b149992033811820c9c8f199329d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodan-ngasa-naa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35496cc04d65340108a6035dbcdfc32695b0b8f5dd4572544baf249377f9ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-dfdr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cfa77cd2b1e7494211b7913008d98dae2e08ebc9de5e4c38b97be6c0332731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1158e3777f5daedd1980d213e0f7cf3f1b9f7f8956a72a72544adb9df3d30d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174397 Malicious code in goodafiun-nuiya-gifia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2b0b865ae102a2851e3498ab9d283cb7e5f7195032291979bfe276303e4981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...