Malicious code in meteor-paleoclimatology-firebase-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a821cc361348d4284aa6f017dc34b7f3425d8f343062bed1071a8761fa8318c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeometry-eventhoriz-taphonomy-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c3be56c95cdb3180faf1ff5f1f7ac9b1287134bb4a918d5d585bbae225d4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187138 Malicious code in gemini-hercules-orbit-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe0e579d0dafada0cd5327982bc2a2ff526ee05793971d21670cb99531d451e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xi-moon-star-fire-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362014d5ddaa5609b560cef0f3912766ea90c9f16f84a1fd7f3d1750deb77951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188745 Malicious code in playwright-rimraf-version-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90c9ce759c2ff105ba07471c175f8ef3973282b1178caecc178aeed3b051da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantumfoam-run-script-troposphere-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c28a5eba8e1702bc9040b8858caf62a7744397b6b2d831244e7b07da5d7c6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeogenetics-typeorm-superagent-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fb518cc35f6cec101c156458901f3b2b420a44583e7444c743e0625549debf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-janus-juno-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c4d24d6c0937c0a916af5b388852eb2c5e7fb318480dba1e23ab03c3047296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186184 Malicious code in cluster-sanitize-resolve-omega-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcceef72f7076040ad3f53d861981ebd1e83dc7bf7e6c4bbd7c584c0c40e5a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188239 Malicious code in nestjs-equinox-fomalhaut-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c0cb4105562e09ca2de2cdc72d2a0eeab9560bb0757df8a660d78b0f9c5759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-async-enceladus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58b94629566eff1ac38fba20744f5df271c6b581808cbb219078e2f02e88fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187392 Malicious code in husky-despina-readable-oscillation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adef6936078e914f40a91db6e76efafdf970222f3620390210150ef16c332cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189181 Malicious code in report-good-error-user-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72c93e97ff1357de0fc34488e9d23d0a8ad52b71977cde7e0ac0a8ea5dc92de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-mini-css-extract-plugin-vega-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341b0fee093a5bc333b9bc719cccccc3a0a2761c15e4f1ae597b33f4a6d534dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xi-grid-module-sed-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a634fb198cf4383219f1b5b1c69e64a93187d6e1183e224fce675be68543101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185588 Malicious code in astrobiology-andromeda-lightyear-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc736c55c72d0f9291044d176f8994899fcbe84570846333740ca27bca8d31bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185712 Malicious code in axios-astro-html-webpack-plugin-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254ab7bbc92a7c4b8dfad0eecc86af73b9b16e8d10411f1b91d9dac65b41f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in index-short-java-phi-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e263ba680a09fbfa7fa23f8bee80092a3b81959c15f1cd633d5a32f174fd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189648 Malicious code in standard-kuiperbelt-neuromorphic-sedimentology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6813ba4210065b547d71da8618762bbab598598fae2265b0e054e998d3bb2d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186124 Malicious code in char-xml-xml-validate-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c76ac411c304d6c4ff3a8efeea7f9fe5ac89b92dfa39c8e52594a2d41d9b510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...