Malicious code in figures-proxima-sedna-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d0b9329c538d56e5c03a9784fb71627128b7a5d0af3687c492dcdac386fa18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-quantum-computing-eslint-plugin-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f24884b7f8123dd633e86819d246df7e79be71c3680536de53b2cdce89ba5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stack-bundle-public-air-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6dad623ae43208f3d2ce6d58b9a6877f82f8d1b29ce106c6cf596c71f8fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-lacerta-eris-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4338b9067de467c48ebcb22a68da6ba8445e72cde9039197e552af0dcfce6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-computing-server-phenomic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4eaeb6ca6f3e7e8583b6325db4dc2405956f5cf99b5fea3fa0a71ec3990d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innercore-magnetar-xerxes-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90a43fa256d202c4b4ee74f02897d32a09d8ac876f289dd3ec2a3b0b4255285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187441 Malicious code in impulse-blaze-yonder-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64a8943de13674c80f2692180d88feafa9120eecdb35280551b668f62cc74de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189063 Malicious code in radioastronomy-eventhoriz-thuban-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8f4cdc8f92641c1db1067e927b73c3770a0b285eef9d5f6f7241bfe47832fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186317 Malicious code in cors-google-mocha-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d114af8d971cfd46a6d164d73ff566fcc20fb9de50a635c47f8b650efeadcb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188642 Malicious code in perturbation-nextjs-singularity-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b165730c41881b44c233e780d2b9bde16b2fa49b0f012d8c28a06092c15347d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-ofi-cafacevavisvoemolcabyca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962607cb45586f2764eeea9e30e1d283b9636cf945d3d9cc828b964090b7f75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181693 Malicious code in astam-ifut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa5f02ad1e2b71a6d5f1839c4bbcd63ecef37b51fa3d0a4e1426575acb9d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63182d8d0c60a3d0cd018b412c748c911b1c09aff5ca54774a1dfa756dcc75c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180901 Malicious code in teate-thy-sonic-rolu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eefdb65b523c78a38793f7c3d7b78512b560ee9972df4e5d0705a098167527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miusan-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ce78b43d7994244a459caa4be38081e450f553a7b9f8ad75b0b1b9bc63be9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infaruduitagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0228b001fa9919f6ea9ff2bc461fcb786ee4b209bb463402c7b27078f3775aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godi-tua-inanu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f0f3f8aff3ad8c14c60ca9aba5f4d1f60fa9f3983855476f35d21f58c8c863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-satmug-fauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd2b7430fbc0696ff84acfb92edb41878cf98451a10c3b5bb4fd1d614072ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174975 Malicious code in ira-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98fc82fa3cdb6b849edaaa20d848c18c3b93c9da83efedabdf0998930a7a8643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyasada-dadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148e8c53ec480b2dee304e862a5f0d29d96d0985b2b00de2a6bf441b7990697e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...