Malicious code in phoebe-borealis-vuepress-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deaa586f7a513b8036116d867f85c2889429e1affc2ab69c5e417d09987ff2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8e478555161d23346f7ff922f8c5628d28d7fb3aafb9004466f99613fec9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185895 Malicious code in borealis-hercules-ora-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9629f8a43475f540dbda3704d798a24991f7120a96a82ddb110b11d79e356e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189489 Malicious code in sigma-query-interpret-phi-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a99585f843fc934bcd70b362cd9255963bc313216a20084ac91a6471106bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-report-pi-module-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00eeae1ab2bbeca7c4cd632577cf6916c3401c525a645b193b91425590b719a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-gridsome-oauth-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e9e7cc1e7c42481f808804394b0a8b7ae377b94f9d631eda6a135a33dbc5c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6529f5366e3712b3bcecb53700bba7cdc4e0d404e2d5487dc5e3255f0093eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-procyon-xml-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f22cb07a609a28b005e4e95f1395efe6c1caa1b328526d3412489ff07456b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-computing-server-phenomic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4eaeb6ca6f3e7e8583b6325db4dc2405956f5cf99b5fea3fa0a71ec3990d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isostasy-meteor-passport-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5750188ffcc6bfec77673e3a538523e10dc0a5ae302b71417fee0574355e6209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-epimetheus-halley-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d0ce58004f4853ebd835af1a1ca2e27dcc4bb1b1cb75811f3bfec1c331fb9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenology-zenobia-loglevel-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2c2038273686ad4e4c976e60b166c18b1148952183ab5873e7216c6dc12c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185451 Malicious code in analyze-char-fork-theta-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f903f79e67bcfa45a3643c772a60e0e3f7b066020bdb4dbc19eb67e84ea43304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185608 Malicious code in astrophysics-mesosphere-neptunology-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684bd004536091223ef4c99151f120e9e68cf9d9e4b2583634be658dd965d50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-antares-polaris-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d14b374c2e4ed828cb310ce2dc54b05a5bd88eed2f4f3a9b85637b71310abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-thermochronology-oscillation-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23992ff1d63ebb87f14b33af1af9f888a76886aea879d7893bbf8d971fb1fa92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-dog-module-notify-good (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c83bd10b2435c6dbd483122fd890dd154abcfcc705f21736d501c33135c704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cron-rho-analyze-socket-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ccfff0cb2760978774c62072d2c40b1b8f36364183047d5546f5c67d0fa50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185768 Malicious code in bellatrix-local-puppeteer-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a6d6dbfd6ed566627b43a2f32125740bc5874194d00ba5e1b805d7c17f74ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186631 Malicious code in double-decode-encrypt-cache-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd120085360bd941b6b618bfba167ef9076e6663bd3af7dc247e1b7a6588f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...