Malicious code in kuiperbelt-taurus-csv-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8993b5329a7604ba0c4c94d86538798b1f58cc2d7e21fb16f89b966ebf27387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-auth-epigenetics-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97778258cae0aa68e642d04d7a813ecbb7fe5274fe3d46b749e45ffebf87170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187057 Malicious code in function-finally-beta-fast-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277c2567a05d73248efd5212ab88022580b3ef9176c3513534c105c50a8feb43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nu-double-import-theta-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac277cdb2603c0d0004386887eb6afc11277f7f1255244070b236987bb24bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189918 Malicious code in thread-compile-parse-decrypt-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7146ef933c1aa178443b1e6366208057596a2447d96deb31dc0f893f501187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185879 Malicious code in boolean-reject-balance-sun-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436d2a7d547003a68729e3922ccf2d7012044960c4bae007727f0bb68cb43ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-arcturus-enif-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f91b89bbe011b4d3b3e04dbd89e0385e56a2d993d744a9408364b5c392d2b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-gulp-npm-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294aad7730d18543319acfe8ea7de730b6de8160892ee5e56072e4c6a5f6a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeogenetics-xenos-telesto-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27da6b5fd36366bdf4dc7b0f00159a6daba029c6322eae8913d87161aaa6a6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-eslint-plugin-heka-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7172bc209bdbd48b581811a9de0e6df6701af3db1f57699b07b93bca57191fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-telesto-taurus-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d6f0ea86b084adb8b06876f51ec67386e9c0909ef0c64ef6d102bb502980a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-pyxis-proxima-isostasy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee145f91f029367c40892d60c12537ef872ce0c03862342747ec9269427cfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-callisto-miranda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642a0e3b58478b1752d42ebe06e3728a14dd0d553d9e35c2c8bf429b0d2670e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-private-crust-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725732624ff25cbca460975f0017c52a1def485c39e5583dd9ba8475f3f98fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-celeste-resonance-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b7daa0dd48aae2de3f1cc7c64f7fa3b63d95577226dcd56b70f089c12ed9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-graphql-ursa-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd57c25c7dc8e5c5e65fec44158bf31a22298db16e48f9ab0afbce4c61fbb2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compile-gamma-wind-code-deserialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79a53ced69059b98c4597e3127eda0bbbdafd6e162e8951361655dec32beece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-vortex-lint-staged-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d541b72f12f4ff134a895458ff7ace3372090c5a8033ba0c1df81b2f95297a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cryptography-epimetheus-prettier-plugin-markdown-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e74f3563293b19e2d0093030d411190de1d0d6a99c8d37a5480f44a9cffb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in darkmatter-exosphere-exoplanetology-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fd91944b979138e05bf2487dcd84925f2788baa8346eb2c5452959746d963a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...