Malicious code in astrometry-postcss-loader-mineralogy-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca444498c36427713db81e6375390896a4f50a84c54ef6a52a73cad76ca35971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-betelgeuse-yaml-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1334745017722dbf527ff416d1e9f97996036c5e8c403d3a34945f517279cfe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-meissa-airbnb-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90614fd54ad4b93ad60971086709bbd736fc4d959596cc79df4ddb78e672937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biogeochemistry-test-express-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80da7adfdc662484fd92ec3d26801045267dac8ca72457ceb3555b61f87bbbc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-bootes-library-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9f0955fb715756a243c13cdc75fae960ac6e5073430166849b2380a0a8aab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190488 Malicious code in zooarchaeology-mocha-markdown-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f7d5b9e7d646335b98b3484b258cbd866c1a4bebb4a13bd382f0b097d0be63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189031 Malicious code in quasar-helmet-metabolomics-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc8a6683ea8ccf5185aeeb43f7d442aaceebb4a6daf47fbf4915551e5ce2f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187998 Malicious code in meta-fire-validate-refactor-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09eee909f08829879eb110a52e86f4be34210063ab5cf8d951247c485d8594d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186298 Malicious code in convict-quantum-hermes-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf996ad2856885b1746d8ad7f02dbbaf7e4d0f0ead39b1688e7e449f4a6c576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188321 Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac38fa2821b6fdc88b06b5e178d5ebd9e620d2b13fb68a8d89bb70c1efd4cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-jwt-loglevel-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c579391a28b717cc3bab01d83cefe0a9573ccb0c4b8dee4c27e98fcb9b1adac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-less-polaris-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93ef4506fd0232368daadc9c2eef184cd5f9630d08eeeeeb9b7319cd4119fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187198 Malicious code in got-cosmicweb-canopus-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b583c4c57856c012b65646066ece5cffd3db1a2c3206c475e5c74ad3d81bd04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasarjet-prettier-plugin-markdown-supervisor-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576926635b169080c570659fe0393f4270f071642bc3a6d93c45167be7d1e955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188287 Malicious code in nightwatch-javascript-kastra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1502cb2d438c26158c0aa98f86013e06d8d4438e066e035cc159953501e1719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in singularity-bunyan-eslint-config-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2283510842946d2aa3d0b25e8270ce1e0e52b912769d3adadb85a58493c5e67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-vega-atlas-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fd14fbfa7df3518df196ac7331d4c07644a19e457f73f31be91ee9ab01ce42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-pm2-lacerta-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a15f24a3383d0a2cf2d4910535b0e870d23aaadc1c90c54fe9c449020340802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189635 Malicious code in sqlite-oauth-quito-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ca71d4114f8ae4468c127def1828c69d2b57565bf13761cb5938f72ffc59da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-gulp-barnard-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f7e32234b92867f6b230c143440f62bc1655f5c517cdf17517f6c027d7bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...