Malicious code in betelgeuse-antd-magellan-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba981ed499b399f9a3ec1b2f5c6d1ffc81ce85026281fc7b86016b3732bd086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-fusion-perseus-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefa16c4e0a39d7da9fad605574203f510e4e8f3a569549abe21bf15b3621ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-mui-wasat-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53cad67075a8415d525e1cafbcd4ef14fbb3971d78c9c0a1085f10f86fb472d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terraforming-nebula-cordelia-virtualreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c189c82723ce5a436c8482e4184626a3def10827f7f0f3bd4cb2a84f806b4040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-callisto-betelgeuse-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014b72f48d0cdf678c671d8bba429cf7ad5630d66432049d24216676d7ba809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cron-kappa-bash-serialize-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53deafc5f542e358e2be400b3647937108a888871b1dd73316f4f4157605370b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in catch-bash-mu-daemon-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31096c13f4aea6a88a542856fb5bca32be9585f83bbf33f7d5e4134637ecdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-nodemon-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d559410a1d7d46410b0043f04df13062a94d3ab8a1f955226d05167489046f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-backend-primatology-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5995d6d5645041f7e7ee5a9952e52c2b3df30f72996e6c50b6cc3211a8f910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-heliophysics-wasat-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f18f0da4eb19316997c90d96ccdcd3fdbbc492bb805db52cc447d51631bb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e4cebbe5b73c636c28c777ed6499e4fb906fcc3ffa5a700a0f16cd85821770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in areology-darkmatter-ablation-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfc4db01117ee624ad9404c0333c608488382abb48fbb690352e94c3f4e111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isostasy-ganymede-archaeogenetics-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e72a040292a691c04c12c28505f0378f69205785bee641e65a94f8f7df242d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187870 Malicious code in loopback-remark-cordelia-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03050b2cb2866d7de11164971c4591795fadadb14bdf9da6411cc366238b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in import-uglify-shell-assert-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50bd88fd1544b70a1e57fc9c10d6058a210842a8d2f61d9caa28c034c05fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-eleventy-deneb-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60f9254d7e112b0cafa3f70a3f75b052568cb6aba5c5b36c30ab0558c2b06b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186685 Malicious code in eigenstate-electron-builder-despina-bionics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856bb07252bfaa1fdcf360cabcdabbb8244d7be52299c195e584d92372aa55a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189600 Malicious code in spawn-scorpius-antares-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb9bfadca6d920bd34d364ac84ad6c3c22634e0fe9682e0ae3301fc85d6dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188213 Malicious code in neptune-betelgeuse-halley-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d3a2b6835a2e2cd78eb315d5e4b82e68d0bcb3840274c62bda761b9496ffe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185480 Malicious code in antd-style-loader-miranda-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3f4f91bb59bd776abbd17036b4b81e568e06959ffa1d211ed85c33a064cedf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...