Malicious code in mutation-docusaurus-scorpius-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f6271538fff9b9ee158666dd6bcb5e2c1ffc3f2da26a8a7cfa3a22b2286e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a22361096be70425abad1a7efd5cf9876ee3807f16a6b9935376c78fcf0a8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sanitize-analyze-benchmark-deploy-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 357776d084568b7bb6759c075f0697946d665ad87d79a71a9cf49839fa26ddd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-notify-stack-water-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ddef8cbb3df6b03d480fc9b842a397d7dc55f271ce04cedca24e2d5d1065b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-gridsome-xanadu-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a279895093e63b7653ef1defaee79c1cb92b45475d3a6c650d3ca4ed7a056fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186992 Malicious code in firebase-postgres-gammarayburst-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a1e64e2b0e0b1a65d84829700c0635a7eae0f3ffd1ce8631f459fcc27499c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187361 Malicious code in higgs-markdown-pdf-kaus-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ba62848a1b93975d8782477b6f4ac21636b1cd955646b801e68e663f18d5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188853 Malicious code in promise-aurora-kastra-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd23f8495f78b9cc41e9e2e62559ef9669b5d8180946e1bcd605d30a7877e114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-halley-ophiuchus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f06c6744631b77adfa679368aa5b79b0679290514f0027616c347fd5f572ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186176 Malicious code in cloud-water-old-moon-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182678 Malicious code in inda-fodj-guofagiapa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f800451491780eb3162715cc887022e8288887ff3c9ca5e64ebc87a0682d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-belweh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c932be15e58388243d62806fe0f5ce1973d6385679c6c5c61b991e950f30dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180802 Malicious code in teate-thy-sonic-opiinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507d1483bab61aef5d368b7253b1eee639f35de8b186aec6eaf62192801b023a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176186 Malicious code in mubafi-sunai-cai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc70877e707c7cb1119f6b3a74f772ca7eaa12b319060f9daad45e560abfb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176608 Malicious code in nuilva-avmiam-ravo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcbef8d44e3ca9e1cc670ef86ebfe8c52cfee1098f010a57247421050582efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socnvi-boasvobsadfgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0337761128db30040f1e04a7ca5ab5644d3f9471109f29620aced66aef0d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bafai-sunai-cumau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69365981fe8f56bfbab0fc799580eb3410076d349e41439456e39bd65b42d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173646 Malicious code in butanaih-asfafi-daujuhasiaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc695b72aa806c4278cf5a2097aa4ff21ebc431d339732ad515fdbe6de622cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174577 Malicious code in haritono-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3b6447ae11f33ff29224bfdb8dbdff066e192c3cca176ade1c42ed7125ec24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-agag-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6933c21028951584f9f1a1f0ebd8ff79d3b59922f98c7aafa5c2175d99697ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...