Malicious code in altair-async-jabbah-radioastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164dc0d18e8436c9b9b2d28e91de04e69468ba9603a30d5512837f595892c8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bccb17c4b674e6159db53f27bc72f3b0aa547f2c6e40f0e3c61ee22969090b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hash-table-enum-debug-unix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e9db4a5d7ddd918c7c0ee403554f86845cb7da929c3225fcfa88c84dd5d61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecf14a07cd348f4aef4bf71dd063f333aee890c7b9fffa4af049cac1d997ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-route-boolean-compress-float (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e16944033f69a50b3ed444de85b5c36b1c0905ef2508cece19342f450cc4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-nodemon-cosmology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde5e4eff09a33f1389f7b207284fef123917e01d69344dae811a66121796ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-centaurus-electron-builder-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeccfb1d261c6ca7989d2be6cee1c0b020d5eaa19f8a9d0e008e8d47573304c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brane-pm2-isostasy-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa01e9199e6ce6222722eeb81495ae737caa2187e43015eef4a82c33f892f6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-less-heliophysics-wavefunction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8987f4d7ce795a5f2186e61fa899436abfaff67309bdbbd27646c1723add64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phylogenetics-fork-tectonic-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cd04db7ff79d34415c4910ccf5f498e218ce9c415f6d4a1e893027ad764142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-init-miranda-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a99b354cc0e80cf5bfdc8e125674477abcb0f262775850a536241b2b90e9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notify-zero-abstract-old-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a53282b311726aa389d4f18e04f8cdede5fd23b6a0f0f816a5e9547530a4e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185849 Malicious code in blazar-pegasus-quark-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8fb562efe2576263ff6f9cee25641a84e3a8a489f30297ccb205fe5448defec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188315 Malicious code in node-sass-commitlint-lynx-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7d81eb99a4b615630e9110e9e4e09cc3bdc9fe3ab07efd0d8b6117778b75e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190440 Malicious code in yonder-sass-loader-firebase-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cb086ef793321eac1bb5c979009fed3c19bdd4e27384cada7ff0f8aed49e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188861 Malicious code in promise-jovian-cli-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7920e2648fd98b014ba6e5691d3aaa8d488968c54a9a951d7f0f09354f62de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188202 Malicious code in nebula-development-less-loader-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d9ec969819536ec693125456e7ec41bb0dcc6c65811409b1a99ffb0fbf13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189802 Malicious code in tailwindcss-bulma-vuetify-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dae4b6617c23b94996978d683edd81cdfa0c3dea5d59e4276843468c90769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187317 Malicious code in helios-fusion-rollup-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e25b31fe31c11fea70657cac7ab2cab55d83c2a919aa7ee6feccf67d47567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186673 Malicious code in easy-parse-async-xi-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd6435fb32b846e888bf4ec073cb1121ac3787e29184213f76f831bbf3095c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...