Malicious code in ablation-rigel-phoenix-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4722a4aa3a2d3eabaa640988d1bb56407667f8dce22d649488a5c01657467d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-quark-materialize-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1361235dc778d6f5cbccdd8b3c169fe0d8621f1ccbd26ff529fc2b01bae8e0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189512 Malicious code in sirius-astroinformatics-ursa-futurology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5945199d76fb43c98512cc0d420376ec81e5fba1228e737d3b251245f1c13f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189004 Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc616e1c86db519ac69507809139300362341a112b7750cd00848d92ec1602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-paleoceanography-blitz-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0760eec369a6a11d2cab8c3756d2a182fb378a1df24edce74a41659dbbafc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf33e7a660e7f12a243bf4ae70b1401a0f4b66ec86a8c2aa5e877f46d3750826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiogenesis-terraforming-sublimation-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e9b8b0a5a3c2d8563cc099f89975f33456ba63261a9ab3282fe27fe723269c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-tethys-enif-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157c49ba15774f802dfe58ca3f72e5256be68674fdc83c6f875c551e87fe2d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeometry-impulse-galaxy-dysonswarm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a771881cabddee40de70b816e41a9e98fab7a207bc97d1bf8ebfd9b215ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-iota-auth-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a134db153287fc48bcaa7911fb098e3e8419e1acff1237db92b1b6b1c68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-phenomic-glaciology-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5041aedc9f556fa5042866507cc67da08df40c63bc2232ad8c83e43644f6f999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in array-load-sandbox-code-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0b8b8fba52d623ff84606663460a4fbe8b7ac106f45386569fde446edc9b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrometry-halley-auriga-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0987c30c3ce3db7f1c02cef5135ac147f992aaf87e66da991eb1ef87264a23f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrometry-passport-less-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c137c4ef5872efdadb22fcb81eff579f9b3d68099ea3d74d52eb029fe7d10edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-public-eslint-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8260827b01d06f49fa980d26d357da964681809e032e0c1e4ea86afb5a6ad66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-antd-magellan-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba981ed499b399f9a3ec1b2f5c6d1ffc81ce85026281fc7b86016b3732bd086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-perseus-despina-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba22f0c594d568d54e12967d841c787fd3e71573d84357c6a218f291e91747a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-javascript-pulsar-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e42433738cc5a2accb6a2b35a72082ee4ac69aa8f58a357c9658e5819a94fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-juno-eleventy-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a651f6b98ef3ec7de1e3366e3618090aba6d851129a759dc82198724df69145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-janus-equinox-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6d6ef13b489bbc8b7a52e41f3e53262e31a84c11cdd68253db993d9a2fd26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...