Malicious code in key-refactor-finally-optimize-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d884c51afdb274f51556f45b4b1a3cd67fc75bce3d5f03fea59a2f25352a3e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-saturnology-sass-loader-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb54e9749d9d21998cf67910838ec70d40b9d045cee981abefd69fed26a290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-supervisor-hyperion-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1acf8297e72612fc42318e4bffb75532887d407ff062d75774073fb6cea9677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ichnology-archaeogenetics-repository-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d427b21d1e1c3f178b62ed1bf3f46c5e28790ff762162804d7d4a5e0be1a2757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-winston-aurora-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af5c52e6cf6987260607279112d0d054adf72f69bd5cad9cc62fec8cf109c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-redgiant-kardashevscale-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08788ceaa486e98ffd1ab8b7ffb4dece829bf89d4a6f7042306de6eafa7c0ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-compress-phi-bash-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4452d7b0255f5bfde9306684c29b815108b9f682b2d753820f2f60cabf2806da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-graviton-webdriverio-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbeaeed465424e52a3a1c461e253d7aa23522c4d71e215bf651ce7fc5cf5a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189373 Malicious code in schema-bunyan-magnetar-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ce6f081cee557707eacd7810a9814c41e0e6b0fa80e601cf9858edcbc9384a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-cluster-asteroid-wormhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f439fbc8184c33b4d3fcb4697058f662ff06229dcae196ce2b304f9a2e7d22cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-dog-link-authorize-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1611eea74b726b3946a61925ceba39c59029db92f76bdd65a1251f03348d7c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-prettier-stylelint-server-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6af256150fbf835417b18723113d89bd3ad42360b216fcf8333ad5760ffcfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-comet-adonis-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba309579742e145eec67128cd1726f352994bbc24340da2452433bad6350725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-cz-conventional-changelog-meissa-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76581a30ce1561ccc8aff0c4f6f3ecc981e5d814d26ad12af5b54f32937a161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-lynx-baryon-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c047aaf9be12297281030b78228cb9cc29d099a9dbacca667f8943fc6b2e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decoherence-neptune-saturnology-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b550a9f0da242bfe9f0ba64dec95e44265c55f7236a1934c5bc5b965ee23c4c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-nconf-antares-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4caf3fa0344f2aee63fcd6310c26ee30f4d3e8d913a64bafc82bd31020a0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-deneb-phoebe-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e503587813565ccf9b93395be34e61ce05fd7b6a71e5c4f6f1bc95a90b27696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-radioastronomy-steganography-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4570637a2fc26f6065d9a514ce97d5a5427454e1864df6aeeea4fd1563720406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-on-oscillation-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ca9d06180b7ce0f8167aa6796479c6ce559c18461c3ecc78a266ab88af199d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...