Malicious code in ursa-process-query-metabolomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9eb276d7c42a3eb8d32f6a4fd0ec8a87d3a091523a686fbe495218f0f56f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orogeny-fork-query-troposphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c492b47b53956d011ee186610884f977d3c12e41fc55e4512fa5e5ac20842815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-cluster-gamma-fast-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1809c61c48e5efc4e86410252b50b463dd464fa14ffc6adba5f448f3e74756d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-prosthetics-stream-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8349dbfa155f2d339ef3fd2ea67bde24011b09acb828ba410014298d1394d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-epigenetics-redshift-geochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0cb3e92026bed89ba1a7df8206dfb41da5cf939d0d3e4c83234ec51d085d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transhumanism-registry-nucleosynthesis-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daf5e4ae2dec9f262e8832dac98bbb0596a495ab9b2645f18ab32d77ec623e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in byte-decompress-cold-deploy-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef141eff83134eb1dccf37d5ed667b1a2bb43d54e22c1432a3be0635611317e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187435 Malicious code in import-float-omega-user-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b9d72ef4a5adf2927a1577844ade2d0903be998fe38061cbfa62e1633027df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186042 Malicious code in celeste-baryon-stop-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846401c80326a995821fe08966683abd9e419a6930435b3f12e358b285781155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186212 Malicious code in comet-auth-html-webpack-plugin-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5b037c3a10e0eb5d63054a411dd6a2daeb791121c669593b5602687a52454b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185413 Malicious code in airbnb-titan-pavo-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1598783b15eca6936335df4a84a0344e4d4d3e714804992c93e368d3a8cf3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189199 Malicious code in resolvers-heliophysics-apollo-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60103abfcaa8fc26071abc38c8d81f1d5bd8f1c7ce82c117b98ee3f28734ac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186122 Malicious code in char-double-load-notify-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d12118971bd0678f5c5ee873fddbd6b6642589f8c817d45309c0210b7bfdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188383 Malicious code in object-authorize-array-cluster-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34246e08ce2b9bcabd787f7abb0f7a897edd5a188bd93a724061606b70cee008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187816 Malicious code in lint-staged-reveal-md-electron-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa54493c930c23e4a10f52ee0582222498e976e40d79d36f0cfaf4c33da601ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189672 Malicious code in stop-cressida-prompts-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb962d5b873cf65209cbbdd3c78b29f2fa140fe48dc0cefcdabd5d10426b5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187943 Malicious code in materialize-framework-electron-builder-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a40e282cec551d107ae4fd4f279bb9af587898b119a66cfbc3a478e8c8172b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189556 Malicious code in soap-nconf-europa-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aad8a3be7df013d7e0e09bb498d58957d73eb83f91cf5e19cc66349a27e9af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188536 Malicious code in paleontology-saturnology-standard-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4555dd27e7e62780ef0984d432fb6a5e16fac735e5253883450924af4b600a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187647 Malicious code in jwt-mutation-dagda-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2929db64171afec57703302466935401c6763c0dcb88032f7433c14889af5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...