Malicious code in altair-async-jabbah-radioastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dc0d18e8436c9b9b2d28e91de04e69468ba9603a30d5512837f595892c8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-nodemon-cosmology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde5e4eff09a33f1389f7b207284fef123917e01d69344dae811a66121796ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phylogenetics-fork-tectonic-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cd04db7ff79d34415c4910ccf5f498e218ce9c415f6d4a1e893027ad764142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecf14a07cd348f4aef4bf71dd063f333aee890c7b9fffa4af049cac1d997ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186673 Malicious code in easy-parse-async-xi-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd6435fb32b846e888bf4ec073cb1121ac3787e29184213f76f831bbf3095c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188822 Malicious code in private-abstract-optimize-view-rain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb70db1790bb65e64e2974752452b944ac058868f9967bdcf6799ccfa1ced5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-genomics-grus-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35bf64f67e83bbddde486bb7b751b28499036af81c5344a6d53672bba1765624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-init-miranda-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a99b354cc0e80cf5bfdc8e125674477abcb0f262775850a536241b2b90e9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notify-zero-abstract-old-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a53282b311726aa389d4f18e04f8cdede5fd23b6a0f0f816a5e9547530a4e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-ophiuchus-levels-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00e2b33ecfe6efa1b745f3dc70eb10dfaf23b6cf9dd3ef2b8fa29f57ea8fd01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-decode-process-orchestrate-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e27d28f9ad2788a67a1929e3d71bef664870e512e39baceef376995e2cc8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-less-heliophysics-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8987f4d7ce795a5f2186e61fa899436abfaff67309bdbbd27646c1723add64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bash-serialize-decode-grid-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f77e4d6d27883a5416570e199d67bddb626be68458845c00ac83a9c839b6da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brane-pm2-isostasy-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa01e9199e6ce6222722eeb81495ae737caa2187e43015eef4a82c33f892f6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-route-boolean-compress-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e16944033f69a50b3ed444de85b5c36b1c0905ef2508cece19342f450cc4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-lacerta-entanglement-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16642552a6d597c86591a4a1cbb8f43b1ad3684cde6618a09349b8f72810b1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mesosphere-bootes-primatology-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8eb4476e67bc8ba2d8ab0e4bd9d74c8303fd6ff5f358e8668ac8c8457cf414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serialize-short-grep-async-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae04f6ab05f55e6390ef99711079e5b540193d28e49c1fc67f9881e00a48a995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-xenos-dione-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db83500cf3a16dbc3ca0c22ba4bff36c9de611ba6a892a7bc8283db3e81e976e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in catch-daemon-mock-emulate-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4424acb56cb398c60eef12481aa28aaa4c0b92ebc9e818fc755add92f63edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...