Malicious code in borealis-rigel-string-exoplanetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f2dbdab2e1ba4e40caa517bb65a8334df15b1ced872d929a3e379178347ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-orogeny-tardigrade-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cca49ed0443fcba435da5ad6b7b18a4587c6827a86961106867224991472ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-rehype-xo-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a51f0740e1612c51322e453536c8292d2bc79861076bc5c2b152821856564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-astrometry-gulp-transhumanism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4329a95dcfa0e1622818152248a41d94a3ba730de57357e0fa2c4f82e5e2950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-pegasus-winston-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67fb1c058e5116640414a75f741d609712e320816ee67dfe77952386a9db1222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecf14a07cd348f4aef4bf71dd063f333aee890c7b9fffa4af049cac1d997ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-enif-tachyon-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3e1fe40b9f4663cd8b878d886d2d8206a84740ad4a30ca7055e0b73b99ffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186121 Malicious code in char-cat-execute-eta-authenticate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9713342fe9737ab1d549067b7de055aba480da58db6bdea8625417cc3c3c0a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188109 Malicious code in mongodb-nodemon-callback-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215ca53b952a9cf0e27dea22bbc2f071c70f3f2c8738b83de3625f453dec9925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifut-dakniaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd1f92f351f06aea66b75523850695d96d107fb7c6391c61324e23625ef997a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indea-fodio-agajonifau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e166c6ee7ee6e7509f5f16ad77f48309b56da0e7a415944e0c7fff804c659483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olobc-uyg-ugoofifaduahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25336c1c188efad011f084e319b85211ec45c7cb7931478518cde7c44f9ebc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182919 Malicious code in itale-adci-gnygyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fceb56cc952db27ded200a4e1c1be6277fb937e757eae6d844b8bdb6eb4602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181462 Malicious code in cewe1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca0a53a7b53e1bc4f8fe9f02a28ee2e58c29342e39ba3d8d3ee8ac80e4dd69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181458 Malicious code in baso97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf434ea23cdf28f8b9c5d3a51351c6734bfc3c6f36e4797d1894e079d0221d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-utcu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1819160860120212ba821223a1b0e3d4b52fe5545162639205621310133a303e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b190ccbaad54c2890308ca6c71ceb240ba862a882f958fe6cfb6316311bf4590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvnvi-bofafanvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff89e9839d9b8907d670798ab4b7229060120a47c604116f6e18eb20c6d485f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-adag-aisihai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f95e84311cb63c5d80a051fcf8ecd0bb9723ed94602f66f4f18353218836cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satug-infaduitaggai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b58752f8e36f7f22d92fb1c69551f8bd4041a6aaaf00106e9d2accff5cbd3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...