Malicious code in hash-authorize-sanitize-signal-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036f529790af1d972ea5481f35974ed1ddef51980d2dfd257f1206670838669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188229 Malicious code in neptune-sync-holography-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57b68e79022a7960c4c1549b9687a8d747ccc77b49e84f234d1288166c8ca72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190434 Malicious code in yildun-mesosphere-redis-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e148044bad285322ab507ed67690451ac9bc1bb36c8181d0ba9aae18b6d91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-dactyl-foundation-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de4251893f8cf0b528c2444bc8aef33307f0241ae32247dcc74b1eb4c4353bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-quantum-computing-koa-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a4b8cd8cbf9f137039d3f9b8aca496bf6d4154493af8261c7c0610245ed308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-geochronology-yakutsk-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3db91f52b9d0f558875d7af6fd1852b71e2ca085a84a3956c3fcefdf06c5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-writable-redgiant-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93ec88221f7e1c4c2b9ca4a7d46b67a0e7e51b80a43ce3317fba938d101de6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phi-shell-old-old-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf8b98f48373b31cbb5f1e89f4a12dbe3f2261af644871c9045b89528e7622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187261 Malicious code in hadron-vuetify-astrophysics-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a023aa918b6df89cf02b3fb9cbff1e261dbb97330b127160a907246a48e94bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facc075dd9444f2723af86599f1c0a112a283b2d101a025f16374e4e5a91ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186549 Malicious code in deneb-multiverse-augmentedreality-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3bb282553929ded53f031976182f596ae80de4f0259afe9086d8c43ffaa49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moon-small-nu-rain-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcf2a1dc5076c624ca43163bb493e90fd98998b7c3805d3aa5c9f1f5817c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188021 Malicious code in meteor-dysonswarm-geckodriver-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a885a9e540e123aba57de65173041c29a0894ea5ce3a14b3f8c7ef0369341f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189102 Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d787ac5197bb2ccd0791295222d1fa188d9eb72d6140865139d4dcf028fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-jsonp-metabolomics-hawkingradiation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b99ac4b6d1f2920c9cfeb64b32caaef526384c1277eb268f9495396666671b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-nebula-cosmiconfig-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d990e48bbacd130f5620b5b20983fbbc4001f0ff552a7c6e169141a13af346c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-xml-rehype-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c337d51a5afe782ff83bde8f55685686a71e8d4b23d52af00c64f247b76db8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-version-polaris-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473d20a9e34bd0d8b61bff859c9548289744b91ff9d50156cf77a4aeff126ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-iota-webpack-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a864f90e149e2b4496c53b9311b410904ffa98c5015ec30a16c6e3787810c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrometry-halley-auriga-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0987c30c3ce3db7f1c02cef5135ac147f992aaf87e66da991eb1ef87264a23f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...