Malicious code in chai-blazar-quasar-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128176b0ea3dd4cd1df472e8b25d1a0d98e84d2b8f1a03ae9e5ad8efb29eeab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-yildun-magnetosphere-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb89cf07a1705113e53696ca73ca6a22b8cf88af3bf3ca4a7eeb158514ec49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-dynamo-antares-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548e58df085b49fb6b9511df3b11a9697aff3fa1dfec19601ea92bc5f247f34a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-terser-webpack-plugin-enceladus-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d053da0377a86332b8a332dba7d3417176072d80fee11937868c599ab833365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-apollo-nextjs-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fae748e0f487ac104e869992e792c26ef9f016308883c633af2c0eb474d1f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panspermia-oscillation-bioinformatics-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91373d25a0368f1b14587a511a5b8882955dbfcb47ee7e0849fcd671835d4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-virtualize-private-link-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4adc0e9d1ff505b8a506865352273ba4c53552e07dfa1f7c2194dc608ad2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-promise-redgiant-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea908eb89c40ecb98f25cb7fbe7bdb9575dbd9175140d9fba6315a9ce87d4814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-slidev-dione-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03d3c71d21aa77a6169c643dba701f64071225b23bacd12182c7248813caa49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-bellatrix-superposition-interstellarmedium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1342c69244da654b3900d26efb403b53881ca8917a548d692e0bdd73e2e976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185835 Malicious code in biosignature-winston-xanthus-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e90dcc2ecea82bf4db69b8db7b01c821564ccc7f9fabba05f79f2c63202efbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185935 Malicious code in bulma-rate-limiter-nodemon-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009a5f663c52773985c30c7de3050020ede21883b42f36c0dd75d76534b9b859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188071 Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0159cd9626a0e52af757ba48b3488f9f060a2af1756b874ecfbd0ee5361b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189673 Malicious code in stop-prompts-fusion-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a369d5bd92a84f0b2a7db8c2040c883f375e842eb37e42b4aeac8b102ff0f006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186835 Malicious code in eslint-config-jovian-middleware-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08e1a70125c98d783c4675a920d9eefc7bf5a6891ae90b0e858fd9a3a898c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189696 Malicious code in string-epimetheus-neptunology-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87799b6ccfec3c2366bd5ed81d245b37d7001448ecfa937c6f2af98929640806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187472 Malicious code in ini-mongodb-got-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038ac6a29d5943f57bfec8a485c48e4adc402bddaa61931f49f1e469f7ef312c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187167 Malicious code in geomorphology-astrochemistry-alphard-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206b849dc5689a7e5c43f5c73d619dc09d9bd8248ad29e5e4a9c7beb15c96102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189007 Malicious code in quantum-sirius-spinner-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c009730042d0c36541d7a9147c37bc383153c82e0dff8575f0337d20d263c0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185383 Malicious code in achernar-zenith-ultra-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10086bc1fa64586a64925f5ec4a2a3c346bd5e465318b0be544bd740ae44344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...