Malicious code in module-palynology-kronos-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbb0c80c490b51b1c0db117fe652f90324d49f399fb71d1be2c441edfa21254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-blitz-kardashevscale-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4011abbf08341d1fb7ee6940821bb4f174b5d2cbc04bc0d2b44148c74c88e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-compress-phi-bash-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4452d7b0255f5bfde9306684c29b815108b9f682b2d753820f2f60cabf2806da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy-serialize-omicron-mu-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69139970a915ceb4235e38acc7b982f8685dd4a844c2ea07bc4144d8a42be7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d787ac5197bb2ccd0791295222d1fa188d9eb72d6140865139d4dcf028fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cladistics-geochemistry-vortex-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 654f488b9a4c4d95d757783d5812652e68474653dd0247b093552f6bf7e660e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-schema-higgs-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea29699a4255f978ebc4feb2e45e81710950a299da4f1af155fa329cbc775c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-thermosphere-cladistics-multiverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df22224108ff6c39fc68113abe9a06d595c6870c958d91695f485a8f4bbc46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-vuepress-sails-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8174eba67733225bc2a363540d7f5712c22849add86bbb13c447eb8e2266a409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-steganography-tachyon-exobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16231dc3a37859ca38718acbee5374328b5cb6a2a4f63bb4577fc051dc2be239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-interferometry-sails-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c5081fdf4d0f7619a6a230546bbed5fa605459a20f2fa63ad703371acc7140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-async-cluster-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e22371ae33978d78ed8ddbb073e247ae2bb8625f6d9ea550c75707b6a451d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primatology-middleware-planckscale-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c06a16d39babc5b879b4fcd7ca4b45293e129f38f2eb2e9bbd4ee8da57d0a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-hercules-scripts-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a81f666995ddc6c6187d95530b91ea605e66fd4709f426879c3d30977691f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-hash-key-report-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af67a09c9ac8b1f5a97cb010cec5f8683ef9b54771520fa4630f0ba372d1ba86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-magnetar-epimetheus-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd836a25d5aa73f526777d2c602b2a919e137b30c1167b63e65262a3eece2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186047 Malicious code in centauri-lacerta-config-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3805c39bc995bedc2c84b0d6740aacee5cef37f733218138e2748a3c8e387a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186330 Malicious code in cosmiconfig-gatsby-janus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d569a94adf638e19a24f0f06a1a6a865fbf7a01e48a5109520fe71f210a2307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186699 Malicious code in electron-builder-kaus-non-blocking-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc97f9ddff3d836878325e761ded0213655d4240acbfa676ac68ebd722f29c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188725 Malicious code in pipe-resolve-signal-uglify-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c40780bfa0a60a0f11514d456c9de6b44db34fb75557dcc422ac8974ca8ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...