Malicious code in native-thermosphere-hermes-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4f67d061dfcfbb4679205c5fe7d2a2d2a453c58543e03469b41ee83aa316f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isostasy-paleoclimatology-thuban-augmentedreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3be9fca56893033202e3fe88e1169ef5561cff2b7cb0a16ba72d8c9f45f3f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-start-halley-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d50e0398241b84ce5aba22460a7ac42df758107bb13bfd8e52d696c2989eed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189787 Malicious code in sync-uglify-js-rest-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab95b633e6385faa2ae97803caa076c5aa6894ce8f5a472eb6441b96ae2ea32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189459 Malicious code in server-callback-css-loader-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b3bec8505261d79f060d4853518f6e4013a766f0d6093c149d679f10912456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189389 Malicious code in scripts-octans-redis-technosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eef1a3efe8dfd4a127e5412b2d19e562437814fe0894cf40f7538e6c567bc50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitaukailok-don-olasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9d31b6b44cd7a6ce31d19da5a708e1969b15df3b09ebc18d3e2096591188cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manu-oyi-ginuosgimsof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8bac6de78cc5e2d25bb0e42062e7abfdc5a070726981c0ae5614b38f407ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-utcu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1819160860120212ba821223a1b0e3d4b52fe5545162639205621310133a303e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4810bc0c14186540e44f093caa65f9cfac3cfcf456527a49097e1d694a1f651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-datdfadsid-dor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c56fb847c788955bf03a2e7dc4ccde119c3048d16f9345f47a7a36c40c56e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b6731ad2298c3890eef9a64e9695aeaf840517c45ebfb279d44820293552ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-alaah-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30dc0fc4479dd3795cea8dc062294df4f903e2d10fe5a6a83ac594bbf165b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165735 Malicious code in samehadaku-sess-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a7958d9feb400057b4159fda558455e1f6eab17b1cac564ac2437d2c8b8cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-eridanus-mini-css-extract-plugin-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dd92d5c4317fec64cd19f404a9cbdad63da59f547233ebd3a85c23c0e9527d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-pulsar-config-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6165b6024805b3adc5e2199016ba077ca2901335befbde30b4f24903628994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145530 Malicious code in node-sass-cli-charon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e51d72c3d0f1f895665fca468290ffd1c71c1ffefce6a9d6d60b92d1e49c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146441 Malicious code in postgres-neptune-start-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e313b6f9d33429c95c9c1d346a82c5c092d01bd5405df768c5b3ce038bb232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...