MAL-2025-186911 Malicious code in exoplanetology-eslint-config-eslint-plugin-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd8ba2ece7a374b69507ba324e1274e708be47b29907e414058f5f3625588c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187890 Malicious code in lyra-fomalhaut-arcturus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53096e7800c4afe7142f8895c571a8234b3cf07054a65f4b0e757e5cbb5d578e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187332 Malicious code in hercules-config-juno-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4cd30f00323af7b524f61b17219f21295d6d27272c1dc39765553c6d27266b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186704 Malicious code in electron-postcss-loader-yaml-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd6b06620bf85f280ff8659339047adecb9bcdc503d3a50fafb169483256ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-perseus-remark-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce96f56e1b53ba28c31e4d27ed1b224358022b063da73e5cf10330319508792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shell-class-encrypt-info-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e40f5a80a4c02a821298a0f6020758be052096be3e880026d550837ed3e387d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-run-script-octans-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bcd540d3089d4cdee49cf3fc5e84101e85b4b10116b145f1f13927a252e045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upsilon-socket-cluster-static-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4127e8b9df2359bf4f313e20808bc22f8a6248af19bb410a6350869034d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-library-eslint-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701dc722dbe1c6101fcafac29480e3e419955723110a2d26f7d7314262f4a288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravitationalwave-transhumanism-repository-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b0e9fc46c6a81836d9315a840c93c66bcf3f1fb14630364d0c78c0758fb2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-octans-ablation-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8978bd923183b2f8c2adeb260b1beacf5596db8503a689fa02d4d665279a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deserialize-load-byte-delta-optimize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74be2ad25d38b0d959d55db1f801401e5e21d44237d75376a71ba1bed0d94b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-halley-terser-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6dfb854cfd17d5b06c05f8223eeb22c789a6217a138f953d0edd5bc0997597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-norma-sequelize-hydrogeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c5310268f12744e307ddeec31c9193e9e03f4c09638606993ade4b4ceae9989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finally-stack-error-cold-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851d0023f1b630511561a3a8277fcd85b55a566b9ea984b4ba5f4e35d51eb296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in route-compile-good-private-tree (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4656944013166c647172585699e90a5fa13386025f1b2465f79a8fe3483315bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-zooarchaeology-achernar-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e463af8410949bae2d25305ef0ed390c33b196c10addcaec3b1db9ef17bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-test-betelgeuse-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8c54d1cf82e48e21e0919c55c28945ae75a22c803ff46452fbae803bdfe1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-odin-rimraf-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3175aa112348afdfe90cf7021d38d6aa613445ca9d922956429700ee421e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-triton-avior-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e452f33f4d946135197dd190e23dc7ccad92501decc88c03373713cb28a1fcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...