Malicious code in react-bootstrap-nightwatch-levels-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b4694504f4410dd51f8425128c7f0ff89ad0ced5e6287410c9132f7f235c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-nashira-heliophysics-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a45c0b6f2ad44fec8b8cd437328119eff54f462c614ebca18f5aa3de04082b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187788 Malicious code in link-cat-fork-char-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5ab55b4c3e29acb931e3d95408acd0a439484161dee1fdef22b993a7942071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187037 Malicious code in fornax-socketio-ganymede-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf81223eb44037f720c7f81236de5d3bf785a23ec6a4b48c754958e420b7afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187635 Malicious code in juno-ichnology-dotenv-safe-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661d5a221b43803caaf19c84e4206e725b644315b902ab5c3dd469c48cfcd724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in java-orchestrate-awk-process-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23029396724af0865eecdd010c3f17e6739fe0ce56c8d44b3531fbdeac934801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parsec-pulsar-areology-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83728336db821db8e3edfea191f300647358c704dd0e05a3ef3a4999fadefbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52340530e8e3adf5630568ae9cf3e1425639cf4410dbbc5f52ee374a406b15ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in byte-root-test-kappa-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9828a39584b83c1b225e4838169006453b25472c92126df3386cf377a7da123f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188626 Malicious code in perseus-hermes-polaris-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e60303986771acde3d009f66e53f1bd8499ba9a4b0e3ac95133826c43640907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old-stub-xml-deploy-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e8f422e088bab75c4abb1e298f807dcf0c370c443f55e40042e701ad51990e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subduction-phylogenetics-tachyon-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d23e85fad2795bccb4695d01f55d114917b907a7cc918c35106dd514064a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethology-subduction-foundation-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845f1cb6960a58c886de2924a1338800f1af16f5f973e47b7b8d751097e2b286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-blazar-quasar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128176b0ea3dd4cd1df472e8b25d1a0d98e84d2b8f1a03ae9e5ad8efb29eeab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in water-cloud-public-big-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49323ade98a3fb6caebbe0cc2612cdb4f4fc617e455e9031e1cb581830ed868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-dotenv-technosignature-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c213aacdb33c9710b0725f1700b663eb0a518bce1ee299951a5d392aa2e9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-phoenix-rest-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb399e61ec78cd7d61dde7ece649155031041bfc66b022c9f0ef12e3b509ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-promise-redgiant-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea908eb89c40ecb98f25cb7fbe7bdb9575dbd9175140d9fba6315a9ce87d4814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-solis-markdown-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a190c5cc853c9375209877f18132eca1a00d888440a8dfbc5980ec1c3e3bbc8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gammarayburst-semantic-ui-antares-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a49ed247651ee25333f1052e7f81315a7d9fe38a88fd3654a6ecee23ac3316b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...