Malicious code in polaris-wasat-grunt-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1affc7ad0b6150f57fb3a0fdf934165deea0ff7b907870a00feb2822ac91c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-holography-wavefunction-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c09fd2453e24f48107fbf3d8ce34cb5c157911aa14bea9e03e3c6f7a6097ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-quasar-comet-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81365f9fc5c2f91505f735b8c2f870358d8ccb4640b6b9d0b2904e54506807e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190268 Malicious code in webdriver-mocha-apollo-server-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c1cf8f48364cfee6b301adb4a524be8bb44d13eb9f240cca4f81726177c97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-fornax-phenomic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027eccb2059e4e9d4978c1294182a8c666dbf5f0394eb96327a6a25b3a20c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186405 Malicious code in cryptography-webdriver-manager-schema-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc67c3883cf7c7ca302f207d6de8605fafb02f7731fd2da71f762551c209aa18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188237 Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ce8afc89dbb4d9b8803c81b1f7a4c931f3edf36f43e471ae33f472e8148e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187133 Malicious code in gemini-csv-cryonics-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57321bc7da3ae1f7471aa4b2daac2201509cd922f65a18ef0992a031b983c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187824 Malicious code in lithosphere-markdown-pdf-winston-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6fbfe227af2797cf89ea184596ed69bc80870c57f08a1e421accae594ddd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacffgteafsgre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b562b6eddf8d46edeb28c4c1ac013ecf105428d0f56e38d35e7c8088b8b7fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irhar-aaesdeadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e6938b3af18767fd65bcb77f97c2fbadcdfe0cd66ce75f89ead23e4958da74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangi-olia-iaiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47093a7d8448c760ea60c35f842c7e45f15ea4b3b9d0f0e4292175c4c700ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyib-givakisois (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c441b0c62d718e63175d8f6aed14faa21f20d9f3e78bca0145c2c8bda301e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olium-niluvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5ef6bf42d4bb1ccf98ae0ccca0f13cead9d6d23b4a11a4c33f677e5b211480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182606 Malicious code in imugay-avig-ijiuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6f5aa01a8209b853bfa6157a8afd81255f79fc7f5bdacf741403ac246f276b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182023 Malicious code in flights-lutuig-adisdfdglonolo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9411ff2084a5f0827e187044e29aba96973657d09b1a5b4ea71ceda21be6448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-acumnacfteagfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5712bba25e5040f0a62b770806c75631833905bdf6550fc299d4dedb6f959c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in libc-ug-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9136dc2b0c9da3cf142015b3163abdbfa4eacf5584fb1f3191de2f1b5b2579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181320 Malicious code in @akunsansan0/kopi5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2636deba3531ee592478b89de2d87e8a042cbb957935849b8f7b452dbb1da8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-tagfeh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2dc8298b8d6f058297910ffe347cda09102d829eb7c45323a40e6b5ab49d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...