Malicious code in sanitize-analyze-benchmark-deploy-encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 357776d084568b7bb6759c075f0697946d665ad87d79a71a9cf49839fa26ddd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-heka-wezen-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c295e465036b78eff0cd11ff9a8e7e1894c08d139ec57d8043ea93e45a02fdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in borealis-rigel-string-exoplanetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f2dbdab2e1ba4e40caa517bb65a8334df15b1ced872d929a3e379178347ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-borealis-paleoceanography-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cbf8f7f7c20f0f2447cff594b125306eb9f2baec1daf20a389df5654223f40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmochemistry-gemini-release-it-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41718fd69b8698a75fab60d886012af544c433ee2dc1ff773bf84cb35cfa684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in container-tree-signal-notify-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71d5038f64d6e372dc504ee04667b316a274a372b8dddb45c2cd8c93fd779d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-vortex-blackhole-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a840cb750914a2d75e4627c09a5d65fdf3f78ccd08344dfc9f366053fad4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-geoarchaeology-husky-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf0b6bfce5b812d86511042ff2d479088f8af8dd44c9845d780bf4d110c0a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-protoplanetarydisk-quito-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68aa10411418a1e9162ef35ed572c716c7be7fd3f732221752c375e50f69b740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-nodemon-winston-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4ce02b99156b543aa9881f2f45c3688c27669e2a3d782b1528ca46d04e33f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-simulate-parse-integer-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f595e875d8be76b910f8b5812d7c40c89b52395acb636de9b3c68cd19dc6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-geckodriver-perturbation-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa898dd9b0ecf67bf135b03027d809bf8a597128a8fb16ea32387a5fd838ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in singularitarianism-interferometry-cryovolcano-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1a008cdf498b4338faa36f959e2f1eccbd04ff0bb18ac3f35f4dfe01a15e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-auth0-meteor-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3abd4857b3587cf1ea5f38d4882fcf6ee464d5b448188b97a37f8487635164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-baryon-stop-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846401c80326a995821fe08966683abd9e419a6930435b3f12e358b285781155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189061 Malicious code in radioastronomy-augmentedreality-library-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46c96efc804064fee0f10bf6dcc3c961bd9e06f3fb6c814fc03ffc08e9d1c194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in singularity-bunyan-eslint-config-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2283510842946d2aa3d0b25e8270ce1e0e52b912769d3adadb85a58493c5e67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-selenium-lepton-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfc1cfbb199ea1ca3bb90c697618a7d74ab51f4a88a59c1319771b74755a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-xanadu-delphinus-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb9f2ccb9d5c8590e1737a03651014399d524be681aa954a7567bf8f1ab7a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd371531b6504d7302f781d1d49aa918cc42e03fda931b017ec70b39844a114a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...