Malicious code in mesosphere-nanotechnology-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ddaebeed905bd3e4d2efb4932a9094e6dada95ad1d5541fb3cc456209d2d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stub-scale-alpha-epsilon-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75f8b4a809808568e4e6cb14303729e4dae23ba42ce8fca5522267fd3e6f2a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-triton-string-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb411fea7c69a21a400b3efd4d901fb9e34e1151f1fe103fa76e85315c011e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-zero-rain-daemon-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984383ede6b7df3654a9bbed20b7f0f7249154ddf4189b3a50c1431af44918d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrophysics-prosthetics-callback-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0ae3b110625efcb8d84b8b454479ca3f743b784bc4e5716c246672824d210c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-loglevel-levels-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb23e5f025e22619db0589bfdd3e0f01870534acb40e91b70a63bd6a2c90f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supernova-eridanus-radiant-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee3338ad4519b8b64d9dfca4fe1ba0f2248713067c8006e90c89bfa27497b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in view-omicron-unix-compress-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d86eb2e159a609113cfc2efc8435ff741a9e4a3d864ae507fe6a729dd0058b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-jovian-astroinformatics-ablation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a312ee1d39ce12596c3d43387bd9eead6fec93b1060c13fe52416868153972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-husky-mensa-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f73ec9c49d224ee7cbf6837dec4abf5ce1ca29d78e986a3c716b2676641eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188590 Malicious code in pavo-paleoecology-pavo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90238c3f7cfcbff6bd504601fc2e280cf775606bc574ab0e9207f9ae50ef25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-petrology-sedimentology-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1954de2e091aabacbe5fefaabe6ea1065d082307bf2e67684ab0624e168e5726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in error-validate-refactor-byte-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7990422b33800950f82b858c49bc8d9140dbd49c020770a8373607ea132679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-quantumfoam-loglevel-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ed2698692112dfc74b6f02911353f2237a752abc9c7550f33631d1e5f59620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-cryonics-gravitationalwave-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225c6f028045f33fc48c67590d46948179140d8d81db33b12d629102859783b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-dactyl-canopus-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62799d2b20f03765f78f7108ecd6c29ff5e28773faa479e8584065f639f569e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-supernova-mantle-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844592857cf1504ef3536f2432dae588d5e95ab434bd5b4110f4a8efaf49d154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-public-alphard-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7de09261f3144209c646b5fac5d76328042839266e5a56a0daceac2a505688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sanitize-eta-promise-error-awk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d20cc45b0c3561f876e2907c05759af75b6ae061f01d2d3240a3aefde578d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-technocracy-superagent-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e53646d2d71b5c3190b4a7f4ce2a5856e935feab0663a1a71b74d83bff06d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...