Malicious code in hexo-phenomic-odin-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holography-antares-enif-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8649af4f582c4122138a6cc2191c5208ae130c40e0a81317dfb3433f22d4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-npm-soap-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56716e434cd1c5a44faa2761e4607685f3dc1bfd3de906c84be90f3ba243a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoecology-webdriver-manager-cli-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1702a5ded5d7db3c4166a15a439a1ab13253c487e4124cb1374ba85b937cfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188215 Malicious code in neptune-dactyl-pulsar-paleoanthropology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2123715c56eaedbeaa672d219a006c5fcd02737e10b7110ab4b05abb9c3f5e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-iota-mysql-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186125 Malicious code in chariklo-areology-changelog-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea57974790ac6b25ad20f661e626cd0d461ce58dc78973b65902a16c6c65e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190137 Malicious code in venus-dactyl-publish-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e0885c4752a431d7ef0c7c486161540c316f43b132e783036e81bac58c1dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189330 Malicious code in sails-link-update-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c565b4c6d9dd5485fafd3fce71a661cbee1ead7dd64f7bb8d20006fbbcbc76e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-nova-zenobia-sublimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da48811bc870cbdc1b6a57bd71b295cbf3774c4c96f0277cc3c7519f7ba101b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-html-webpack-plugin-kronos-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82181ab2b25bcac772e3cecded34360db1572cf56e392f5f6310c0335bed342a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-eslint-config-draco-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e217945f165a1f3c90399d422a9537e095a863757767e01869c147571bd5687e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-kronos-charon-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b83b5da130d0cc0ec2d6729beb3684e2dd6f215845318a3c6ce2d10550e0ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187778 Malicious code in library-fetch-hyperion-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2c4eff15bede06787b56a8f8b27dea6ef1f37f7ce1a8ee13de06cce88a6df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190327 Malicious code in wind-sun-stub-function-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f4b5d1fd036d698bd418cf176c93868ca1ef60e4582665fcef014f84bccac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189187 Malicious code in repository-repository-nconf-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2212e917a4c02184ad8313ff8d6188faf06000f6bce4fcf156762a51f7d7b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moon-new-cloud-mu-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7213659a3b8201c11de4613fcf1612a6f3efe3bb58d2c69ab5633e9f00655521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190291 Malicious code in webpack-quantum-babel-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980725b9c25bfa17ccd89e3880bb009f8c98c783a0dd7bd6e66cae551e1ae5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190460 Malicious code in zephyr-barnard-troposphere-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831b922acb7d0b3bb4b811e8e897750f882451d3cf95aa508cf8093a45cb48fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-fusion-rollup-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e25b31fe31c11fea70657cac7ab2cab55d83c2a919aa7ee6feccf67d47567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...