Malicious code in neuromorphic-venus-aquarius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e9c7f34fa7c528a1ccd96c62a29363407f96ea1bddaf382b494a7a3b5411c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189959 Malicious code in tool-wavefunction-ultra-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6440db217bbb9f167b1f6b7b229fe260c8138b56561aaeb8a50a4cfe2d6b38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186773 Malicious code in envconfig-fornax-void-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1239ea3b31415a82c90cd5302c82bcada5a25101219fb703c24e45ba2738c305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187260 Malicious code in hadron-postgres-phylogenetics-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7efecbc67236e9f7c84f6a8aae55425b28b28775927173eba1a0a284193afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186954 Malicious code in fermiparadox-helios-pyxis-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4110ce456b0d3ee05ab386cd882d362726708a69daec5cde442abef8ce9a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-framework-lacerta-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f17dc9f17e12f1b196ee0c36e786282dd58ca017e19208f2db374ca138e0cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-dorado-apollo-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcbc7931eef29ac5c5af7ba06802424115895cf2f3b63f7ae23d400ffbdde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-envconfig-quito-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db114004de8a873c258c341f245d4f56fec63e857a8166cbe06223c1d7447538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186575 Malicious code in development-dependencies-cybernetics-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394b529057f391623b292a4b60d7a51f780d22380dc2cdc5a4c2595970c8ba9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-registry-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e56cf6f9d386fc0387e7eb45edbcbcbfbc0d7739f3829b7448f383ad832400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy-serialize-omicron-mu-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69139970a915ceb4235e38acc7b982f8685dd4a844c2ea07bc4144d8a42be7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-fornax-phenomic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027eccb2059e4e9d4978c1294182a8c666dbf5f0394eb96327a6a25b3a20c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186935 Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caabac9e0f1bd1f9c12cdd709f620e7c1e8d2e0b6ee9f0e3e16f1553227dcede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in data-grep-string-transpile-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0baec754b0baf24fb249ba7fbb7cc8b4653d63b04595b2df0119337a6b7e57b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-dotenv-safe-andromeda-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a402fc1c0185cf4c85d8102b322f31b58e6c77bc884315de297df083490dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-webdriver-manager-jasmine-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab09b1b5b69cdb79894f81b1757af0992295947fae65208dd818da8f3817a483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186454 Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b43b39469f3044ffca305f0206cc9adcde03611a0fd8cf39b08d0230171522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-nucleosynthesis-hadron-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9369464ddb44df2eb49a987731c6b712db57570302fd3f325530a2afb053126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-quantumfoam-markdownlint-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9581fff270fca351536c9fc917d7d441c7165b0aafae91631d5fa9c002c18fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186476 Malicious code in dagda-technocracy-commitlint-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d983e33879369dd931cad741e8149906dfd91e5b8a8b102b534b4b2cea15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...