Malicious code in ganymede-pegasus-xenobiology-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a16413ecf4bed9744cfb9c63068fd4fdcc1a93bd866036fd6806ce8fe319b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-command-futurology-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158f275577a92ca7d58cb9a4b4c7aa49ec6dbed8cde8af11359b407b295ce232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-passport-mantle-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbf90790b787c745d7ecc3df9a5bb266126009d229135095e2d81322087b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-supercluster-exobiology-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed8990fdf184f5ab65614efd7c6f182f9c3d9519fa198517d3ca7c0a7bdee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186678 Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c819411e05d0061457e9887c6906e3929d2896491c60dcced2f30818f4ef45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187689 Malicious code in kinetic-configstore-nuxtjs-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44184ccb146fc77b323b6e19c51c70a173fe426776802cee54b2452ea63418f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188184 Malicious code in native-rate-limiter-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38f83b9375b1dbb5616eb88f859c2dc6f2ddb8d31a21fdcdf96be69a301dd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189843 Malicious code in tectonic-pegasus-axios-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccff1f983b671288870e7ba8007f191969e1bfa8964d96d55743f322876d114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185362 Malicious code in ablation-rigel-phoenix-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4722a4aa3a2d3eabaa640988d1bb56407667f8dce22d649488a5c01657467d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187619 Malicious code in joviology-nuxtjs-ursa-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737dee137a220a82e1a7d331694f492c4100fecf3c4335d253e40036ec0cbef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tau-float-string-reject-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f892c15a0fe0c03ddd87d3d7e78aa84b5bf8f943daefb2a16fe2421b23957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-event-bionics-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bdee777e410b3fc1869f19ba81326e968afb704dace7f49fb14bc7f0397e233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-meissa-lacerta-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c10fd22419fb3d6e178c081f9d5255950af4238612ae142fa4a8d8b98ccd3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-regulus-brane-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d855c15514ea55fd35eff8ca8279a4ffff51adf6a4d33e0ad87569672a1d357d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-semantic-ui-cors-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c28c0cb99b1a0072d0e0ac939382a4f4cbaa603451cb9ccda34510947726772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-markdown-luminescence-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e29190f0991b5c48b8aa19bbf70fe09d82cb90699736789a0239e3a6035555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-dotenv-chai-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135aac248520c4091ba591b4d2d36a84f16d5f524805d7e46429c91cd4936504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiometric-stratigraphy-nodemon-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5346af81619e3b733e226889dc529f61eb53d60b06b5a2830ca2833afd457303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186567 Malicious code in despina-kastra-forever-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c8f509d760595decb8b8160722db2226da87c070b5e751910271123bd7fd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189803 Malicious code in tailwindcss-bunyan-spica-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef7ca0b166720ff7a48b675cb46297e227e219b0c43a8ef775f03020ecc2363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...