Malicious code in old-import-decode-table-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3318615e0691a5ff419704ab106e4bb388891cfde25ae060e932dbbe49b4332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-kinetic-zenith-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33aea94bfb56e0007d05b76e2fd4429326a2eba7c08d4c4190df4b030c654c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-paleomagnetism-eris-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0bc402668138cfaf7a98c94602606b2e89444223aeb567e96a42bef52c285b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-outercore-neptune-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a9ad1dcbf47720dfdd87f637ee8939890ae4c1b9d6ad6d72da161239249d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-regulus-bionics-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab2ac9bbf76ae17ec6c45f2dead8e433092cceef588c319f4d72f40571f4219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-jovian-middleware-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08e1a70125c98d783c4675a920d9eefc7bf5a6891ae90b0e858fd9a3a898c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-sigma-meta-daemon-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9814f634f331ea15ee456dadfc2e7f1468d32fd0e4eb9ef64568b3b1466cec6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in book-compile-try-fork-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a01f18be29f47da8cd809438024dbf979163557d280bbba71baa379a1becc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-subduction-darkenergy-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded23c9e0124c562aa6da9484bbf4806d7866cad1d4d49fc62d109bf56d9f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in user-book-gamma-notify-old (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b393e57bdb5d4c816987aa0de9d8feeb1b8e9e38ada87da71f0079d0e434b0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-data-signal-cloud-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49def6b1332bdc84897f7c299b32c7df0ec1130260ea17e9bf6f0969738691d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perturbation-blaze-singularity-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d94ee357e591d02062c95c64888251cbd977c18af9279759332c2d7380f162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-public-alphard-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7de09261f3144209c646b5fac5d76328042839266e5a56a0daceac2a505688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blueshift-toml-bellatrix-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba781ce6e21bc8fd259330532a0851175ac241caef9ae72c818ba96369dc9688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-view-stub-simulate-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddf3dc0821ebba5a3a738773863d28177213852142d69afceff7c2feef8f7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-venus-hydra-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66e971fd14bdefb13ffa29893acb4ce63a7232109a3f4246fc26be70ddc6ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-palynology-aquarius-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac0bbb77f85d66e96e7621b2df56694543e202d7f900f824020d324e9e6b068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188875 Malicious code in prompts-terser-webpack-plugin-enceladus-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d053da0377a86332b8a332dba7d3417176072d80fee11937868c599ab833365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187412 Malicious code in hyperion-inquirer-galaxy-quantumfoam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9372615808f7596e3256e7d282d0a9e34ef1682932951eef2dde69efdb0f9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188245 Malicious code in neuromorphic-venus-aquarius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e9c7f34fa7c528a1ccd96c62a29363407f96ea1bddaf382b494a7a3b5411c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...