Malicious code in photon-sedna-hugo-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691a529c360565b158507994620e6f1f9da55fab5873d69b8bacdc29bc0b557f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in web-compile-deploy-load-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b89eb11df0d45c9af94679854dc0e9edd6be08c36b6b9efed4a24abaf2a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-tectonophysics-quito-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f06d81e7d83e7039c2760e0d5791cce70c1b5fde03eae9b55bc078641ea538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-slides-octans-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428a2525ab3ebc8ba2aeeb9ab46f2510a73a7eaff42b15ac0ac0ff63a719d922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-juno-eleventy-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a651f6b98ef3ec7de1e3366e3618090aba6d851129a759dc82198724df69145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tectonophysics-levels-zenith-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0d8bc646ca04517eb83b1a5197f35f38394551c86c54540d0ff4550414ef7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-terser-local-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24f9962ed8b60b0020ab4fb27265ea77fbee4bb93d02926c16251a8bd5c9c41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-borealis-resolvers-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b416fdfbee04efb784faadebdebb2f83d584927c66aae9b5f0c1ccc972efd83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-neptunology-oscillation-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c818da0d4724a5056bdb4220b90d6078bd9764e0642c6f267bb98ecdcc268fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-genomics-firebase-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94b29e9713ad4d380989b0c0e6cdac4a84cf8357cd6849a4b7ebd32e68c9b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-octans-development-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b647de4d84c8d74ffa98204aa954f76d7683d1129a058a4e5dfe7bdd5cf622ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awk-minify-minify-proxy-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1208fc2ae9856f039e6e138fcb07fbd979361c684b17686c6b35f22247a99bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-levels-mdx-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442adf60ce8acbdcd15a70104aa1c2f5e2133c7fc2475f6427313c300e424095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subduction-exec-redis-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50aee37e6d03929cdab61b680843806f2fe81f55e49f41e75b37f927111ca3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-uranology-fork-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d89126218c63ad6d2218e842a4434823971958bc5a20ea94a407d02e72400bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-config-docusaurus-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46442ca5ec4e0ee2528650d1f624c3acdfa1e4696892a8fddd4f1738ae92a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mu-kernel-phi-transpile-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82eca8c24515f3f57b6ab4d894be6fb0ac396fed83700b9e8795624a47e9f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-start-galaxy-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6f9ff2255f568a5fe51812bfe0074491bde1fc7e58142a7d271a74671ed39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189766 Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2ef4131d23bf5c2293362acd0d6a0d7dbe8c4af28eb05c78cebe4affa6570c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188236 Malicious code in neptunology-husky-dotenv-parse-variables-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c9776381e5efb3a7dfe09acdb7791e50e6e155d9a98bb73fbb3e50d86aa6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...