Malicious code in scorpius-version-convict-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27986efea5940e143ef52f332a5839f8ce777e19093bd76077e52dcba452c9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-registry-forever-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bee273ba762279ba30203b2a54d467cc3b01e489006d55110b49d433736a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189533 Malicious code in slidev-airbnb-phoebe-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c147ec56a928418476ff97b2e80c13cc416a46f542363a1697c6b3d4e2801313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188362 Malicious code in npm-global-sublimation-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd49961f0d54ac7944b8c564af29d8e2be7f5aab114048fc3a52eaad56e34ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-protoplanetarydisk-halley-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14eed49e06d77509c188f6aa28a040fdcf9a987da14db1f3667f27101d6633d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186709 Malicious code in elektra-supercluster-genomics-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151aa85ff2dca1946cd00a3716ecb72519fd01ae04977e10d71f8a48361320bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187775 Malicious code in library-biosignature-bionics-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c195849028cdb53692f81b71f60bedc1c41ab1cbecd2d1f708262bccd1f04c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-paleoecology-pavo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90238c3f7cfcbff6bd504601fc2e280cf775606bc574ab0e9207f9ae50ef25e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bioinformatics-achernar-spawn-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f955a420fe0667f40a5a0ad8180233b1bdef0114f10407ba299b709b2818db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-global-sublimation-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd49961f0d54ac7944b8c564af29d8e2be7f5aab114048fc3a52eaad56e34ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in singularity-darkmatter-janus-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558b66b94572aef0cee6114e51250db790e75a929c6eb04578726bee70153327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-sadr-child-process-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146ecbbd3d8f2cb52b7a37a21f83f89b55640c24e6ac37ad73bd82f76b37752c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5035fc7034177361a11d4b4e27a3fba157faed7231117410427c76e9eb30a1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-deneb-uglify-js-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109a31ec4ecb8c6fe12865a5cd17692e49813a95e0fe551e48adb90c53366ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integer-optimize-alpha-byte-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cc0597617c50b1abbdb88a4a1f29177a51dd4efc9e1e4472762f2d4125f247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-html-webpack-plugin-zenith-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854f44ca4df072d11c0a459bc99fb7561906493f41e538370f65715dcc2c9d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-prettier-stylelint-warp-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 353b5557626f5f385582b78c5a5e30030a969e37e383a223ab0bc03cad20194b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetosphere-exec-hyperion-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e09d5f8422b8db99a38067cb5bd6a9d0989b5b3b6767a6f669e76f2de03e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exobiology-callback-commitlint-config-angular-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d03030a05c5bd857db6811b031add8d86b357970bbd076059ac391ba964d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-eslint-kaus-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047a1ef16be5d6a938d9134f95717da44c3b091da7e0e621e7aca4dbbd6fdb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...