Malicious code in grus-prosthetics-stream-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8349dbfa155f2d339ef3fd2ea67bde24011b09acb828ba410014298d1394d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-prompts-fusion-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a369d5bd92a84f0b2a7db8c2040c883f375e842eb37e42b4aeac8b102ff0f006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-magellan-foundation-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9be3358b5196be685222ab977cbc9e55f402b2b9a88a7ef872d91c7115e53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-command-io-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 112b69f2e1d1d7f16bcd45f8c8495468b99b558ec30f33487b4df15845885c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coronalmassejection-express-stream-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb7ccafe494f15bf19a6e786f7e944326261f0edda3cdef4b98fbdf9710c04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-protoplanetarydisk-electron-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43730eff79ee89795068b5ee0c4f33390ceada895b6ece6e610d5bb830bc250f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-prettier-stylelint-server-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6af256150fbf835417b18723113d89bd3ad42360b216fcf8333ad5760ffcfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-babel-nconf-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367d06fdbae8de2b7d6bcc68f6b13999fc7160d92484baa01898cb3fd84acfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in user-benchmark-omega-benchmark-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695b5fa53b0ff23c05d1405285ee407040eee45a0bfb4eb1018bc5bc7f8652b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-ablation-cygnus-parsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675a39543d6664cc9f25d2ab04083977400a9d213cdefc19363fd94b3fe9fdc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-eridanus-upgrade-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9c1477a3588485280f9a465ef1fc8ff66f1091fe204ff4e7c224e91a7c634b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in object-authorize-array-cluster-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34246e08ce2b9bcabd787f7abb0f7a897edd5a188bd93a724061606b70cee008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-eleventy-fornax-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea7cc30b90911528e01dcb680bc353ff0031fb1471b18f403c2b5f105dc1fda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-redshift-plutology-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80168c73b44e90a928ec018382d63c6a2d7f6cfb4ca8704de3974a762297e32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in static-public-omega-abstract-upsilon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ac38dd4021854b3cd24d798c971942b5a8610691c7b1bc524209f69ea59fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biosignature-nestjs-publish-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5da20f5f3da9d3423c88e9820644cae1a1723c0ef22e66931bde9716ccd67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185397 Malicious code in aether-start-lepton-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36aedbc551c0fdb6d6a164bc853c5330db99a2f5ebdc2bd7c415435ac4acf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187154 Malicious code in geoarchaeology-oberon-proteomics-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457df8bb683c248eb0726675b92eb63a0c31125a2f8c3dbdee0b1dae031dcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleomagnetism-dysonswarm-async-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb17dc6d228c7901b9fbd0e03461feb58c1ebda6de23469bbf3f76dbcbb588fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydrogeology-hydra-phoenix-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c835ab149e1f8693cf31896af9ea13d0acda9982305146d45ed638b116bca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...