Malicious code in xenon-ganymede-got-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3cdb5311de65ffd938d7edee63411d617e2a115eb667ee052b558090a5c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-cladistics-dotenv-safe-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae340cacc9fef88152d2d2f0ee248db87d240ed77d1746d6db2b10276738e0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-upgrade-orbit-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22aacfc70714c921495c0072e931272fb84602da273d378a399fb895e36b109d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325e6fb2aad5e2d4d9f23c08a7f9fb4551f5eb45d5c80a86846c82f656b10345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-mini-css-extract-plugin-vega-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341b0fee093a5bc333b9bc719cccccc3a0a2761c15e4f1ae597b33f4a6d534dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-morgan-css-loader-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18935c38976d8952bf589369f1a0e87fbdb16e09e484594e5e302fd8d55ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-metalsmith-astrochemistry-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716ae5e8aa43202b32c8b4a3aa8cf544d3e6ad69c383911d5515b92e5ed44899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-barnard-jekyll-magnetar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647bcb1618cd7231944ee6afbd42020458061895e8490b3d485d6225634c630e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-chi-cloud-nu-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23374d8415feaec69ffee45d782c1abaca7d176af8b9626e1a1ce2395eb60d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-fermion-delphinus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a223ee5c8d9a9b9340940cb1272872310f67f7c36a8246d60fada7bee8d43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-colors-neptunology-darkmatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b8249ae294511d610655905c87f50f7eef24561025407ea2e5d3685fa1d074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-google-readable-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858f7b4211ddae783c9dca4669d04a3d883faa28e83cbba2ae5494bcb0977e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-local-hexo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8cbc43bd2e8f930b64bd3a7bef8e5d6d3354d3de596f4ba9862789de5ea934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-yakutsk-update-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4056139ea2e6931e54f1dbb6be8565d9c94ad19a8e4cc44520c8df7a00ac25f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeta-cold-notify-fire-easy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77229f2590e999b50f84151be215aed98544f5d472493de435539a1fb1794260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeta-permission-beta-short-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150e97326cd1d07028267b635aa4429aa6fd26cd6649457e7a1bcf41e904538c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186860 Malicious code in ethology-paleontology-nova-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce92a1a93eef7d8d5c677d88ca01e75f87b3503782743b8c6e058a738644aa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187858 Malicious code in long-module-report-abstract-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c75fc5f13dfae551ff47efab8b84afe20fe478cb03f51553888aa3114d28fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186468 Malicious code in dagda-event-despina-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4af1dba9edd14b6b9639544b279b4ddc5e819a325e046b9aeb564916b7e249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...