Malicious code in eridanus-antimatter-figures-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9f078e333a05d5703ffb66d84694f1b93317ddb74c0ff6cd1be5c855ec5899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compress-async-rho-boolean-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47a72962d3c729d5d4253ec9d28d30df0480c577add110900f74126b32e3a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blazar-apollo-async-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f9890e2f188291623ba4f289354faef1d8a1e4606545e8fd22ed345eccebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enum-proxy-sun-omicron-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1ce60002a208a96e55d2294bff4e57212734d00871e99d52812712e529377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-deneb-iota-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09829ad648a30448e6909586b77ecb91a7d0c11ed07ed4042c386b13811abfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedimentology-spinner-gravity-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50f10b70db6417836bed5412cbfe199599d79c6e933af550fce08433b3db836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-publish-filament-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2aa39d2cf73e1508204d2e22e08291cfcfeb4fdecb5a627d7b869aca7ae494c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-node-sass-biosignature-tardigrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57811ff3009936e39a8aa148ef288a54279dba83243c7e753f89627af5afdb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-enceladus-supernova-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af451850fab8801d34120d211470e5a231805d70b0ce5794c0fb4df3c2cc966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proteomics-electron-triton-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc38110ed40ebd893261af27643229422bb7c0c76d0a9306749997e8f876c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-europa-restart-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1282148b41a453d5bba2f2e2c6359c5beb40a47dde6f6cefae0d1cf108effa41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-non-blocking-repository-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7187ba1a0c030038552b6c04bd621b070f3960051a0f7ecf52925ef761886a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in report-serialize-rho-public-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62de5b36b23d92c1a388e80fe1d3dc55ee676535110f4175eb6a428aea0d3191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189185 Malicious code in report-water-view-cluster-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d47942fe1d8723769bab30f3ba8f16a7ae89128a610ca5f2b3506215e6bdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189429 Malicious code in selenium-cluster-framework-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e3261b632eb6a730ff1c7db5709620010f8bf20bb163023ccd934c64a084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187490 Malicious code in inquirer-resonance-stratosphere-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8045888615086dcf573d963c334214b9b8cb76ab93a54114cae959a94c16ed66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187501 Malicious code in integer-omega-virtualize-star-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f17b62eb52e500d6d763bcb97084f1de1bafb8b9176ec2a21c9bf2c0779b280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-grus-fusion-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f6784c9cffab433ca3aba62b9f5c8ca5f88d292e84c7ef4b23324259fe740a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186607 Malicious code in dorado-hydrogeology-zooarchaeology-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84cb81d2f9006de02c80f2639b15652a181f70f10b8472afa9f18e90b375cd59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188929 Malicious code in proxy-rain-decode-xi-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 004b97a2bfef2272a65920db91bb9ccb657976da59d63e4a71c0f18ea642a87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...