Malicious code in transform-galaxy-writable-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38258b4baa1561b71fdae66ddb0bd2ac471ea1659801128433146ac90ecd09b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-bash-index-beta-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6cc75455d927ac7ec7640978a185ab90cc79761f99095952bcfbf9d20cde5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-ganymede-inquirer-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d0aa870f868241b4b5f4ffd22e9771e26f4a29e3ac8258e8c4b564d6c6c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-npm-soap-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56716e434cd1c5a44faa2761e4607685f3dc1bfd3de906c84be90f3ba243a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-chai-changelog-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57e7d17a62121725e43a4dcb43c230c69a82ebb28081af536c4aefb51532125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-umbra-geoarchaeology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b325ee42e9c4fb0b6333f6448be22adc3ef9fa102f3529f68c8eb58d077bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deserialize-rain-stub-alpha-socket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe3e3ccc671a2079a03fbc27a83e769b85746d020ff909b6623c07efafa20d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-antares-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0795e430f9e9aba719b3b6a20ccc0a64f2fccd57f1f4a9b17108037f6fd87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-perseus-repository-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27053231811897d728e75138a8e6197e848557505ca26f8741717e627d78716b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panspermia-oscillation-bioinformatics-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91373d25a0368f1b14587a511a5b8882955dbfcb47ee7e0849fcd671835d4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-polaris-configstore-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a105ecd8ce1e73138202d04dda63b4869c363dc694a29aa66527412831360b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-nightmare-cryovolcano-cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76c88215df8fdb3d155deb47358326c302d81107bace56723235b1944267551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-polaris-spica-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c782e5acf5440df7201aeaf4eab97c6ad886082ad36c3af25de05758917d3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-prettier-stylelint-cors-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ce08ab6aec4e2e81051f6c0e17b0f3597b89496a46adb738908674ed45ebca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-canopus-palynology-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70191f997c3cfac0e33d3c4234b349313c14a3109867266b4e8474d4b01bb00a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-farout-react-bootstrap-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de6d79a1a73dfed48c1efc53d474df34853b6a3b421d85f3fc6e594822232de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-postcss-loader-yaml-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd6b06620bf85f280ff8659339047adecb9bcdc503d3a50fafb169483256ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in robotics-cosmiconfig-repository-metabolomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0266b476269ab6fd31c48f2494f05ec86eb1f1c760f1a50609d36e29474bc75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in log-cron-execute-small-signal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ec0696cddf358459e6b9b0aec5b76429e12fa22f595e5ae35b4eb9f8182d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187900 Malicious code in magellan-enif-oauth-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc4c2c8bf18364da4a637c9c2468fd55bb49f379d7c4e4155628de1d3945d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...