Malicious code in xo-indus-procyon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127166ed7ac52806beb38f75aa00eb00ab30d661f9b3ff074fdf4d093831f339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190332 Malicious code in winston-html-webpack-plugin-hologram-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9afe8f4ab2829ba5b5196f1795f383340927d445f5df8c4dafeb0d41be9b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-ophiuchus-levels-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00e2b33ecfe6efa1b745f3dc70eb10dfaf23b6cf9dd3ef2b8fa29f57ea8fd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-mui-postgres-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffda47166b625e26114e1aebf4cfcdf0ba36e5dc18a49ff0d9f0de1b5375abee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-hawkingradiation-rocket-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5253824e08b7a2567634e293db52907f34094d4adacb6b4ba2c609be5a522aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-paleontology-quasar-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b24641a7a7948c44221b69d921a47de7c481a7594a92934261a4bd26cd30b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-library-remark-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fdabd876905c82741cd96325f093bde824e42ec0b025da6126b2faf6a4420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast-stack-tau-execute-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137b84784289328d3b9ba7b56948392fa03badb0f041d479bfd6c1126377132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-protractor-sqlite-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190c6c3483bc31b868e8ea21008cfb3be634df9fe8e3d9179835190e130730f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decoherence-fetch-wezen-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b0435545152b75f4c01e16249ba939d98661962b8cb6230d3971ee63181e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-acamar-photon-futurology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994157372809dcb1d61d50a64b45ccc5c80214903f7a0a6b0410b1354efe73d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serialize-minify-decompress-mu-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1746b39844b7d17daa12b977f8d00dbc6391d85c4c41c6d6de6c58b2cbd8c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tachyon-asthenosphere-less-loader-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21c3181d7e1225e94cf6ec96aac89e6b7e7832996548331008eb289be9aa746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-galaxy-antares-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b8bcfdfe7849b90d3c380667f517122a332cc8b4bb07a54ce638d98f18e1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-nashira-boson-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728679d568943b8e701a38466dcaf011a95064ea258b5e16ed806bdee8ef90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in table-private-module-zero-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c75ce0251dcdeefdacf81cb4b3bc7b73a647e814e9cb35b7f9ba4a7729ba677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-biosignature-darkenergy-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ea8e131d374cb063a0b842043d6ab3be61a8a7771fcf3a8ccd89092e836b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-petrology-callisto-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef236e8eb1b727325a3aa33594675cd45f7056b4eeb66de2ec6f4c3717e7eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantumfoam-biomimicry-sedna-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34178369b768ca695f8d713f406ff7b59fd866b6f19b4cb81e6d487e44b50635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-perseus-andromeda-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aafdc9143f2f03e019398a2f17e8554586833012e56e2e3ea753d55afc6471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...