Malicious code in abiogenesis-version-magnetosphere-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640005ea6e048c4bbda92a3a84442171fc521ad5f6261a7af05c49ac3f88956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-socketio-concurrently-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e912fdb2bf197c65c430a9c9fbd0f8051136d3e5aec231088a303a0882b680f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-heliophysics-commitlint-config-angular-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3142a8b96d0c8015bd6d17f6e9038ce57ea590fb830bea588d1c9105ba3e48ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-cli-nightwatch-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ae5ae48dc55180eb76cf505e37d133d5e836a3f4246eaf1b4fdf5e063f5a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-hydrogeology-juno-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08452e7565cb4869c01bdc75de3e09a2f27a9b0d6a9ed83d2407febefd2542e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-alert-hash-catch-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85fc5860c00474af9c73797df5baec4c6920cae1896fe84f084c86f57a23547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-native-cross-env-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98691086a9cd5b5817eb65f3e3379f8ecc8cd6c0265c8261ec01e76d2f7d4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-dactyl-publish-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e0885c4752a431d7ef0c7c486161540c316f43b132e783036e81bac58c1dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e4cebbe5b73c636c28c777ed6499e4fb906fcc3ffa5a700a0f16cd85821770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189504 Malicious code in singularitarianism-europa-spectroscopy-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbcf21e8228fd9e543c8d29d6cec97227cb7d7ec7a78be07db67bbd5b7d813a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-async-chariklo-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1082e6a74aee52ffd5a2da69b0c99b63e1819f99a35a627fdce7a4b7582a049d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in speleology-pipe-pino-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc12667834e75d07b49fcd90c909c4159cb87514b0d23ee6ae4ae93afb1756b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-singularity-got-hadron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a774faf06bed4991c85dbf810dd99be5b33abf9179b3e4990f8badb3738a1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-sedna-sequelize-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d21c1e2f37e5e821a84eed480f80f27b364ea4e2b3e2b5cc5e1d16499a649a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orogeny-algol-kastra-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1aac10d39afcc9729da4f5cba2dd67da57cefdd576456a620137c7bdc53f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crust-proxima-typeorm-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c6c8e10cd58c712a41d9039c79673888315a901ffedcdff6a4a384ab7aa87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in darkmatter-gravitationalwave-less-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60169f4539ca2dfd27fe10bf32020236f1d4b0106bec0644fa577812e0362eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-webdriver-mocha-loglevel-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10d243add4dcc6bc246152c76b5cf2eab5692efb2dce0904e83bf7400760b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-nodejs-darkenergy-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b67272242401d13795a21648e9ed851a8a41d3437ea5e83936e4c11bf21703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-process-wind-debug-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea636a7e3c1a51019c949018a9314e3ce0b0c56b8da96ba2cb60538a3f50127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...