Malicious code in impulse-holography-grunt-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c28c8183009a08a11188523afcf95bf4a90b317d6e72e29db3fb3800beef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187643 Malicious code in justmeteai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a657be46902cfbdda2c87ecc2d13b7cef85502101b60cdb8b3997d29af6ce188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-terser-webpack-plugin-resonance-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab26d4bc9b5b8cbf6996ce1f3dfcf3ed1761087d93cbcdbea53728f32230010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188138 Malicious code in mui-delphinus-castor-magnetosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750dfe89f0a2461b38a8de1045bdda9ffacb48ec68c2e64e2b316ceef914074e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-nilua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5021dd9cd99a52afc045324c2a21f31076c4472f4474796508e62e62656296f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181324 Malicious code in @akunsansan0/pucuk10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada5f3345c06278bd6c8e2ad2a4a5407093c1a3e0d6d61210edfa9d8c5c9412d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-jaja37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d95ed8af8b8e8ab884ea58f5255cad6fea5d523c74c9240cd81da53be2d9e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178101 Malicious code in polymer-tehh-1dfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a545ff05c9e5644e38023b2528fbd94c72605c6082120258af2e1397e3d658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178593 Malicious code in sahunim-sati-fadafuif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54fe3ef5dc2737309255124e5fb463527b90a2b282c7cb8f5eb22af9e8aa45b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177211 Malicious code in poglymer-ogahh-failhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f216f2febb390f42ab1bfb5af1240b8c48af19a51611e7b3a58f55d211962d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171926 Malicious code in stellarhunter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efde1a229d98659ff10d9a0ae02fb6d05b769d1679df279190c1e2b23ebb9805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ff-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29278d084534d03014b10719c2980bace598fd51b4dcf4c34c5ad58ac162481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-msssi-usr7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04beb8dbc811e49a2969c223f19c4a295e48bac4cc23b6e37355ceeffe7b5ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169687 Malicious code in ucok-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9aea45c0fe6430ee08c4f4de45d8d8b106ef7cd11c98183e8a79889e7f27f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-gravity-carina-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2255b2533f27f07d85f1f3b076096769c811f06d89dbc0fbabced78c2c5c67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146672 Malicious code in prompts-ophiuchus-indus-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d007e985a3247da7668e6a5323b5a2600c9ea75aa3ab5f68e692cace8f43da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146709 Malicious code in proxima-commitlint-config-angular-pyxis-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de913c34169e8ae4ca886f994f10fbfbfcaf2c7d8b2398a257a5389e21b76c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tomat98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84d37bc56f3bc35831f284684c95143e7e5c78d265d41fbda15b9aa570418cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-donat42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d14bfe123d3ca767dd00d7119ba5461772b8e22878767514030e5cc344529b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disastrous_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a93958bdbc7bb470606880e98ac726174f9b8bce0e4ce1a8e723419a78154e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...