Malicious code in standard-barnard-quark-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbd258c142b9ebcf8b870396a7d74e39478ce8b2493de8dba369ed190dab838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-alphard-convict-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33c2a363ef96b131f8808426949e15ed28221d6374dc4b5c021fcd973e62636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187522 Malicious code in io-mutation-eslint-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45164c7dc6e9e0aca6bece375bafb9cf7bc338835e1beb1fcffcc5c140da59c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189502 Malicious code in simulate-refactor-java-route-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe246c9a319e93da08c8f821deca2d3ec78470ea6b665003d0e4eb5820e6771b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-webdriverio-event-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13ec41d982e5391f4a58b51051dc7c843a88857fae8f519de3e3ae4dcd6f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biogeochemistry-multiverse-xo-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dc9b7f4c64531ed21eda56b6d6d2ca8e52be7d3f4f350c28f419073fa126f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virtualreality-algol-loglevel-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6afa3c2fb3a388e8347fc64e1d8b54a9008e945b4aae230bb4486ce7eec8345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189671 Malicious code in stop-chalk-build-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12304bce2d2adca285ac9ea833f6164df53f2794ac72a2e3661ee2b7f9968c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189503 Malicious code in simulate-small-enum-protected-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672b0b691d23d606b8429a3496d6d9093a46d4507098ad9e64bd69460d7bc129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-zephyr-xo-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a537378001b9bae4498bb04fea101778d1e52997d9ef0b70e87f31e71d3122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190457 Malicious code in zenobia-terser-chromedriver-paleoclimatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f6befabd5e1c3a45c07315f720e6099a8015a0b8720eb8aa31782ee0070b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d3c97f89cf63e178ad70c22fd8f637758e020a930ce7a5f812b784f9baca16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-iota-jasmine-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8425bb6b7f07910bd25a68dfefcdb32430f54afe0d64a10bd237cf2ec705796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185798 Malicious code in betelgeuse-sadr-antd-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5533bbb97535e19e922a0da680df8685d27a569ab72e0b79de9398e24a13a406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blueshift-standard-altair-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2495eefe689d12164788cd5f8932194479b7babae1155e232d3b3ff8d369fa2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-radioastronomy-steganography-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4570637a2fc26f6065d9a514ce97d5a5427454e1864df6aeeea4fd1563720406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48cd42be9a2a6be3b8e905ae225912535c292dc4b693ff78a5278eacad6bb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-husky-electron-builder-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86a1bbe4cecbcb8f3590b941a42cef3a87592003a2e822f176e34decbd8f04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in areology-express-kuiperbelt-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819117857c155692c2a0d41639c5739a13f2e44777fa96cca650d2b82880800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-tectonophysics-iota-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1657f0e5dbccaae1e34f55c0c23f8d33d107b19aefd6281a229da5a52a944ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...