Malicious code in bellatrix-gulp-barnard-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f7e32234b92867f6b230c143440f62bc1655f5c517cdf17517f6c027d7bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189721 Malicious code in subscription-firebase-buffer-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b3d3ea91ba7e31304c70d0495d32342ab391701f8f85c6ef96e71bd38a1e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185973 Malicious code in callback-dynamo-lacerta-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d300878b315b706f8527cf43747b70cde297845c6d57fd85b3a93e8b1d283a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-upsilon-link-kappa-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3067d1508451f6789510b62511e905e3046d9763f2244761c52bc46576b6b073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-playwright-joviology-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5a06ef42fb5690b924816d514ae128fa79405a6dcdba484271ffaa84790c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-carpo-carpo-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13b35cab92cb87cd2a1275e1e555ba5cd6cc2d672f9915764840e26cd51e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186634 Malicious code in double-grid-resolve-data-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec84b8cf5799e8ac659af511e2e198a7e75ad80f432bb110d8f87a68bdef0b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-postgres-procyon-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0aeb02932f948ac72d778e30dc2a45eb788602e06dd414d7abcb985fc34e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185428 Malicious code in algol-apollo-indus-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb9de9d2206a2c485bd77fef8f50c3fdea7fd3bf8bef75d8bd4efeee44ae990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-configstore-regulus-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa106f845b72360c2409496dfe3d10196e362e64b56e8b6839e6b3c82bb06a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assert-analyze-authorize-awk-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c630eccb84be45213459c6615f3f2e1a07d5142b357a8e728754031a1209dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joviology-standard-iota-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8d63a4d4151f2d7abd0d0003f10cd383d8c15f82d151c121367037a69142a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188515 Malicious code in paleoclimatology-outercore-neptune-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766f9a07f9004f3a4cac014c091cbcd21e7fcbdbfe41f71c44aaea583bdbcc41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185942 Malicious code in bunyan-areology-glaciology-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfc2392c12292c74ee9da395bbd7057c863a1871c93f00572733f8d5995f513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187065 Malicious code in fusion-inflation-dactyl-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd7df62b134bcc7afb6138cd72c0148fe9828de23d7012fa0e5c0c2047e9063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187814 Malicious code in lint-staged-javascript-jwt-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cad43193b55e96d7ea3cd1d436ee7ac5623f0f72367cc583e53d0e57d1fbc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-miranda-publish-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abecc7f7e41575adec56452069c9e78b09579af5a2bfa19b17d85134384036d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-weywot-ursa-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af13a9ae5e40d4933f48125c84ec5c03162682d0da79c769bd6dbb8c3c3589d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kappa-pi-nu-beta-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6c3f70765ab517b21664813a98844d67f2c4e9b170198fb4e5114b66fb9283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190390 Malicious code in xi-abstract-user-alert-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d75d95e94323f65152772d90e7d52b5035b21d824667592987d3bf9f9a023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...