Malicious code in sagitta-tachyon-rocket-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87105f7a55705922e8228e6ee258afe22d3eafa3dd23c68fa837dfbbac199b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-wavefunction-ultra-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6440db217bbb9f167b1f6b7b229fe260c8138b56561aaeb8a50a4cfe2d6b38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-run-script-jasmine-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92bd3baefefc880668c3a96678023c15fddbbe7e3f7a16d1e11a7467fa15f356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-materialize-publish-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6830ac46dd9d24333dbc5f8c74a61c9334671ab3093941bb7008dc605d1cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-eslint-kaus-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 047a1ef16be5d6a938d9134f95717da44c3b091da7e0e621e7aca4dbbd6fdb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50342f66aea54d13a2bfba5a8069396f221e278212a13e5a0002e74b7786f422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assert-float-private-process-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381d6b6ae92f501705369a58be23c204be60a36080085679894d2452de8eec27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-phylogenetics-metabolomics-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1896e9775f1ddc9909fdfe077e42090773fe04d0f252673361b2626480d650c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assert-alpha-boolean-awk-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e450137c9d4b35cdf13297029db2f42393cd15a2ac56812759580390db060bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-flare-hyperion-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f080b8e739095288c5b6591e7120a4df20933d6f957db23a93c573d43fdfca27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-astrobiology-exobiology-plutology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5022a4f59ca7850edeae70e74134dc60873af3911d08e22097f4aaadf9b980a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-bootstrap-javascript-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bcabd4095430daa841c61c56b16ee60347e93be2e7f9c25d47d2a34c398593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-semantic-ui-cors-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c28c0cb99b1a0072d0e0ac939382a4f4cbaa603451cb9ccda34510947726772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monitor-data-uglify-compress-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fc316f02dce0d561bf90ab32d3702a34a86ddd60eb81d8893367f9b0125e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186604 Malicious code in dog-water-double-sudo-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ddf53c560d51aa1c3e031e98c594086bb6c439d83f948122cda4fc8f6ccd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188204 Malicious code in nebula-foundation-interstellarmedium-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5817b434d706349468a310dede18cde35b6db193c3fcbd9b01ef1a7fbbb22c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188648 Malicious code in petrology-prettier-sirius-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5fb6e174c1f7bd6b8a627dd695290aa83eb2a9dd2af94c2c5856325018e705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189460 Malicious code in server-carpo-carpo-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13b35cab92cb87cd2a1275e1e555ba5cd6cc2d672f9915764840e26cd51e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186213 Malicious code in comet-axios-chakra-ui-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc91c4e3c142888f64416531c88b245699460f10b14d6b992018999bb0c31aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186046 Malicious code in centauri-filament-private-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9968ceed719808ac4dcaa5e26867b53f8872c78312d60daa13cfc6c912d09ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...