Malicious code in dotenv-metalsmith-proxima-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb78e459424812b988b0bf3d83a8d31009b68359fced3f68f72f84d8edc0e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-helmet-dione-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13660b1e5cd8242126ed9b1d8d9e9fd3a9430c6c23281cb67541a8d90eb0873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-terraforming-cli-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 139f22bb319881877ea250018776f20d2290205a8ea094dd1c1fc3e84dc1083a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-ultra-paleoceanography-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2845167a2257ec7f82721ef915aacbaf01c5ba75ccb341823c0098c0746549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warn-array-container-grid-stub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc1c40e8556a40bb1303463fa81490f6a1cd507d53c7b15d0ccee323cc63deb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-pegasus-xenobiology-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a16413ecf4bed9744cfb9c63068fd4fdcc1a93bd866036fd6806ce8fe319b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-jsonp-brane-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0417489b7dc888c7fc76f992a2402c4898362ade16a1783e26a8ac2de36a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxy-meta-pi-theta-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d262f7cb74cbc02a73246c1079e373c3cf5e367f400f9dcfb0c987786b01dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-titan-fornax-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-bulma-pino-pretty-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e2d2e422a2dfc3074f2db8f722b8a7a83c1486e51d381137823f71ec4a9515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chi-short-export-assert-execute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9a5aa5e0c64e003069b43ff89f71a2a040569317baf9e7ba44dbaaa4ce5f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in photon-sedna-hugo-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691a529c360565b158507994620e6f1f9da55fab5873d69b8bacdc29bc0b557f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tau-psi-theta-process-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d9342e487099f2f733a00877d9ff8e0ab8db3d0f66801c67047de7d9889cdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shell-class-encrypt-info-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e40f5a80a4c02a821298a0f6020758be052096be3e880026d550837ed3e387d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-dynamo-loop-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f7e19562ce05bfdec5a4c7e13077d54506b47b9aba65f096d2a73b18dfb64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-saturnology-webpack-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f9b60bcea24bd37bf4185adb3a50def239cd1d9c430419b55ef63fb70068b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-writable-docusaurus-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722d4d900728b73a74cce7951c7c4f7bf6d25c2474c3ebdb2614383d6b187cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189205 Malicious code in resolvers-typeorm-dependencies-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dd2a238d88c0adffe27656503d08c62254216af2d36d818b92df13f4db3c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185590 Malicious code in astrobiology-flare-repository-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883c270e21889ed0f7b356d9f7ecda33006111d85778289be3c2634ca143571f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188049 Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de46289f1110a24c23bea5d0e9a23619502d2752909ab64be08f9fd83e00ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...