Malicious code in postgres-asteroid-readable-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde9ee609c1893f744ce44f7e17918ae0bb056420c1a91a06cf22239e5736047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-css-loader-command-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aadc9bae2c451c458228c585830c85a5ab63f5a358e31b3de37b61fa252b4550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bash-load-fast-unix-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecbd7ca201ba821c1a484ec5b1956590a49883fb903303e7ff401bbdf9ba78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-eventhoriz-gammarayburst-parsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be04f1c66dbc50675b3c662cb03f969dce4e3ba82f68939b2b1971c8c1fd86ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in char-xml-xml-validate-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c76ac411c304d6c4ff3a8efeea7f9fe5ac89b92dfa39c8e52594a2d41d9b510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-nightwatch-tethys-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab19a67d9571b4928642ad52ea4d92a1394cb76bd2b6e7484639bb37cf0aad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-norma-solarnebula-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310edc185150396d4084de6f1966060af47049a0250c939ebd7dfe2899c1f291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-shelljs-public-seismology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae9566848e412c6cc8a435d2ac7d35ae39ce37d5248e08dc3c2d201708995b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-phoenix-sequelize-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befdc31dfbf21824f96fd7dfd16ca443ed7f64f6ae4ef4f86e1d0dd0c1c6c5fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-cosmicsilence-heliophysics-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c5107054f3f6315613a6ff3966d058a30d72d0ed15acf6ef1bc5665656306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8e478555161d23346f7ff922f8c5628d28d7fb3aafb9004466f99613fec9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-webpack-nightwatch-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318806806d481ef740dd17c622bc164b94a295e29a9282fc7c00d3951dfeaee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-orogeny-await-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2382b0c000b2e4514194f19d8259b7e578360d10c1531f70c0f8429921ac3b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190388 Malicious code in xerxes-paleontology-dorado-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbe070d105e81ca92bdfca6f8bf4a4d5c2018fbbcff99c7a74f916951732f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186337 Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189867 Malicious code in terser-rate-limiter-xanadu-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17a13c04a5971cb4246fee444cc08d23000846a1ac3b1116dcbfded9d002347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189225 Malicious code in reveal-md-electron-builder-chalk-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad219c6c13a2f6799e4676b3d3104655eb69ed912f81bfa7f92b9610298c61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185693 Malicious code in await-float-optimize-route-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e098a6f9822425661851047a431e132cc1cb8d102b241a0dd8972f13b4bd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boson-forever-leda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e04409940d60ba1bb1617b5bab2f58238f1ca510ca9c125244997903e6856b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186756 Malicious code in entanglement-australis-event-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe1daef2ddabff000c930f4c64f389381e92e08eed834fbbb30fe6bb729393f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...