Malicious code in triton-proxima-impulse-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb012bc8032df9bf8cc5ab1b784df443d93d149bc076b6fdfb47b22dfbaf7b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-petrology-sedimentology-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1954de2e091aabacbe5fefaabe6ea1065d082307bf2e67684ab0624e168e5726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in byte-nu-monitor-module-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c05abac56c90a4acae81be357b0ebd34e8c1445b5aa04fd003fbcc5a5b8d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-wezen-bootes-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95af838a5409ad46c803f49911e5142c4505a584392775561fc0e5b1eb266f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-zenobia-pyxis-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09de8556f0fb97ba288cede5fef9a3c8b7626453b5d0b52ec242956372d1b5ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-selenology-socketio-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b0922b492f0634fa8fa4185e4b832fcc9ec8b78b6a8021ba713ef2be87ed22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-oortcloud-augmentedreality-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1be6fc81215391cb9e6519837e991bedfbd60da09c93eed5f1cc8fa4dbf37cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tectonic-pino-pretty-build-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0bcd2058f31fec7229382d839c7ab77d7171eb0c186dc44476d099d33ed8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-carina-duplex-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82db29da799b8923adf9e0105b02d015268632fba539c6d56c55e7300b952ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-version-levels-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a297fae66d552bead526aba85b7fe7db06f9336bc28adb7ec24729c055c79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189900 Malicious code in testcafe-postcss-europa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c0b587b82115b84377ead8bc9a56089abcc5377b44746e483ed6e69e89ec63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188385 Malicious code in object-rain-fast-process-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5190458cbba4889fb7152b962f72a7d7ff51afd404bf7aa70ed5cca78937b238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186227 Malicious code in command-axios-asteroid-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180631d019bab0da64cf4a5f147075f13b45f0a00baf1b63e034c9f47ebf1e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188997 Malicious code in quantum-computing-less-loader-mensa-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefb4c011996c06f58eda7e1840993e823cf3eddca4bdc92a366643fbc9da57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189811 Malicious code in tardigrade-mini-css-extract-plugin-nightwatch-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccd2dbe37050ec44770db072262af063d90c8cbb1f901cc4ab7337d91745c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185579 Malicious code in asteroid-cors-bulma-paleoclimatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c757cc0677aa2f8229baf844fe4422f081113cf652d25c7447e2ed6db0fcfb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187325 Malicious code in helmet-pegasus-non-blocking-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14468cf08644b774f382415ed7ea9da2eca47006b532d6e5389e4ad5a9f45130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185927 Malicious code in build-farout-cz-conventional-changelog-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a87d6cd004178f1af5eab56a798cb59c8922a506b252e26772cc07c1e3876f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189394 Malicious code in secure-big-user-unix-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58302a7110a1c0f90f3bedc311dc5eeda947f3da8ac2e2e1dd37e19aa2b0347e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187605 Malicious code in jekyll-resolvers-quark-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34bfb629499da5c9e01ccc9365672ad6e8c74fb46d6ef77e41e64360a8d779ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...