Malicious code in janus-fomalhaut-rate-limiter-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd3841be35626649aacb44b41b13db290ef1dc661070b516c2e4823083cedf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187414 Malicious code in hyperion-oberon-mongodb-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bfcc2fa60e4107cbd635039755ee95dd1734cf3a96d729c4d69c5797c88a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-transform-nightwatch-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6daac7520c355f3e9987d2acb56170e40385b4c9e7bd696c70bd2584a925b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-hawkingradiation-helmet-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecede92c259914338e21166ea4de409a5c0c2c18f2d9985ecdb8a0aa42964bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-sadr-polaris-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2758efa7f7aea7bd87750404b0663d363a1b4c383ad6baac3c731c85ce6b1277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in throw-async-object-public-integer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10aa1d7a7d6befddd3451e86b4c9d3ff5167678967dcb13fa5be0d980ffd643a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185870 Malicious code in book-compile-try-fork-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a01f18be29f47da8cd809438024dbf979163557d280bbba71baa379a1becc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seismology-meteor-odin-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 646f08ee4ce2efea4fd05b134c78bceafe4473b1a8230e8c29bf3c6d80d94773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187604 Malicious code in jekyll-resolvers-quark-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dc947279fc7b4978324c611197f7ba4d99cc1748bf2d4d42d7484d8dfe30bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187756 Malicious code in less-loader-orbit-outercore-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88ea120d028932403ef7118826301f3f3a684d48f6b20f4b3eb9894d104fc25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-juno-supernova-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5416570aa5bf98628db20b38d6aa688ee1a11743013f75bbbf34b033fb219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185643 Malicious code in augmentedreality-frontend-cz-conventional-changelog-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8670d124ec65024366529e678d71c9c6e75aef3c338716d5991bb1f5d1af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-envconfig-antimatter-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e13721c20695ceedd4b482837dbb84cd436a7acde3112801215ee490c3c1ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-resolvers-rehype-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b38fdda53cfa1032f7aae06db1706df1dea83ad971de439a15059fa83d1132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189972 Malicious code in transhumanism-blueshift-thuban-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42d67c23d5b5afa24d365f038dfc900460ad6920968cb7725c1ff6a31a5a2172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185783 Malicious code in beta-moon-fast-authorize-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04718f9575365342a95b182394e3faf16985b0f54304fe8408cb783b9ba9d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tectonophysics-transform-crust-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362c7a3c2a387c1b0b23c2ad16e0ff6e12215ac224b7fe3f752d831110cf1fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-gulp-npm-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294aad7730d18543319acfe8ea7de730b6de8160892ee5e56072e4c6a5f6a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190406 Malicious code in xo-indus-procyon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127166ed7ac52806beb38f75aa00eb00ab30d661f9b3ff074fdf4d093831f339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-acamar-photon-futurology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994157372809dcb1d61d50a64b45ccc5c80214903f7a0a6b0410b1354efe73d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...