MAL-2025-188029 Malicious code in meteor-octans-grunt-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6453ada94af1f9b899d8eb2790c3bceede6d346d92601996f8f8fc7cdd7ccc2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187992 Malicious code in mesosphere-nanotechnology-got-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ddaebeed905bd3e4d2efb4932a9094e6dada95ad1d5541fb3cc456209d2d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-google-transport-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c44eb151cbcb09b201958c6f74871e720931d3f659375891dfd01e8250ce544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entanglement-cybernetics-process-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e06586a765b530944155684e617df07ed0c29003a7453573c8a02a71bf0b1da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-eclipse-paleoclimatology-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e08a1aff2176c66f563e527058bb5b24409ae3fba13d78bb63d0c8d68d2a826f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kappa-eta-theta-sandbox-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274495a6c05031146e800213ab1b1e42dc632a5fe4124ecf87ff927338127a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d787ac5197bb2ccd0791295222d1fa188d9eb72d6140865139d4dcf028fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-child-process-npm-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30eba4265fb685fe49217880ad4f843dc9e946728f6ca2e2029e0d23fb573f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in areology-darkmatter-ablation-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfc4db01117ee624ad9404c0333c608488382abb48fbb690352e94c3f4e111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mantle-mini-css-extract-plugin-singularitarianism-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ff722dde20bc419da2c0fab62920ba320fada29e63e642f21743e99b42aab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-vuepress-antares-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf0668bcdb957f83f8e10040b7ab393c0cb92bdc061a5e437566c48e7481c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in report-thread-benchmark-good-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5572aa52a9142ab052da985144ef50687e5e330598649ddbf7ffbb3ebd7b16fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoecology-stop-javascript-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73cd29b722d214d6b0e2acba9820180b2e3a620c3035601ac2c24612996b23d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-eslint-config-draco-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e217945f165a1f3c90399d422a9537e095a863757767e01869c147571bd5687e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventhoriz-stratosphere-polaris-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4368f8dd780993d398046a88d6324b8930c167369b5c2e9e09a85da327a90a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-loglevel-elektra-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f1f20ab80f61e2c11b6e61e7bd034a3429aa7f420a51e4919dc9442576a50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasarjet-cluster-ionosphere-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0335cb0d12622e1f9f0076cdcad521feb0e990280876f4d6ac17052fb3f76185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-enceladus-cressida-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30127f561aaee92f2844597d8f2c4f4c05917776b7427fedbbd4c3112d2b841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-sequelize-miranda-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fcfe00fd6afb92e1706c29463826fc87304a0c02b85c53af1d7e3625974591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-postcss-loader-yaml-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd6b06620bf85f280ff8659339047adecb9bcdc503d3a50fafb169483256ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...