Malicious code in publish-yildun-magnetosphere-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb89cf07a1705113e53696ca73ca6a22b8cf88af3bf3ca4a7eeb158514ec49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187001 Malicious code in float-new-route-benchmark-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665f090704f17656723a9e6b1d4effa056e5de0f4bdede25a8bf2cccf60faa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-eslint-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1630e5264385a9c74585ac7083a4b36aafec62504d3d7b3b68157e82eb2a04b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185675 Malicious code in authorize-interface-good-xi-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85a36709ba2fdf12ccdbbb3a62be3d509127dd2bf12f9547d0c46a7016f02d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-cron-object-chi-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c60002ac5653229eb6215aa13f4ec5c490f97c72faf60b5a0be727c9092c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-sass-loader-global-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c598cba85983700b376ae65af350b9c9e8d3c93e46a7d3ad8ddc8430972cf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185732 Malicious code in bad-grep-web-private-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d19046a243867da27ff2fbe8d4c548771683ae883e3ca87a73b415622faf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189369 Malicious code in scale-deserialize-function-optimize-hot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc14d89c9ce2065dbff31482a95cff1fcbe19a77c703a1f8a4e9da899b874f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-sedna-inflation-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a63ee5fbe8c7a17380d2b2176b6e0387bba7788e959c4eb1e36dfa779195d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189249 Malicious code in rimraf-webdriver-manager-impulse-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fefd7243462f1f8ccba07dd065e1afd7207e0a92494699f6c4e5e02d331673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188852 Malicious code in promise-algol-cosmicsilence-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61401dd027e8d1fca9c02b35b4293c1cd561b78ddd98e7088a45ed40565dc0b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c7e0b28606987a99e1e5a3132f404b2435465dcff64ef832c045c0ce0f5423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186304 Malicious code in cordelia-babel-on-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991867c5b89cb50239cb4c2cf768a904fa2112cce0f729488b115918476c467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185448 Malicious code in analyze-abstract-hash-code-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-react-bootstrap-telesto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fe8d301287a2cbf12ee63abb39ad3722dc93d2d21a760e22a0fa2a4727b4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189762 Malicious code in supernova-cosmogenic-buffer-bioinformatics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ade48535ff4a6ae12b960998a8941ef26736e6e67fdc6d33d49b63d1d21298a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38d8216b83ac42258c7ec4c2300616f365c570d25ae31dceb3a0406c745a241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-eslint-plugin-heka-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7172bc209bdbd48b581811a9de0e6df6701af3db1f57699b07b93bca57191fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectroscopy-dotenv-cassini-sedimentology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0877ae9987490da3e59673ad1d155843077b9fb9419c1942c74445d2543962a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187021 Malicious code in fork-omicron-socket-easy-array (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dec83f01fe45716ab73eaf8f7a24f32dbc73e07c2b87df02a03f006c0a81c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...