Malicious code in passport-fornax-phenomic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027eccb2059e4e9d4978c1294182a8c666dbf5f0394eb96327a6a25b3a20c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bba21800fecd9e38da48ea31cc273e421e261933c1367a9330955505b5dcb97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186935 Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caabac9e0f1bd1f9c12cdd709f620e7c1e8d2e0b6ee9f0e3e16f1553227dcede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189305 Malicious code in sadr-membrane-slides-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f5afa3f0909d32cb9061af02d912fe9587dcc198b2456101683b37f285bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-development-postcss-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8abe1ab361bfdc7c9bcd7a0b5a189b4e741150d6a0e1f27487db31c5615e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in data-grep-string-transpile-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0baec754b0baf24fb249ba7fbb7cc8b4653d63b04595b2df0119337a6b7e57b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solarnebula-await-superposition-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c226fdcfc6df863c5408e9a6b8341542e42b7f6a25ff45ded78a44d9f5cfdc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in root-fire-user-hash-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d661d39558df81fa68a4a36b87bcf5da9ce98e30924826a802a862aef080e2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-dotenv-safe-andromeda-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a402fc1c0185cf4c85d8102b322f31b58e6c77bc884315de297df083490dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-webdriver-manager-jasmine-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab09b1b5b69cdb79894f81b1757af0992295947fae65208dd818da8f3817a483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutronstar-gravity-aether-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972bd2bdf22287e5777a5a623ae50acb15807c5fdafe094d797fd69123e914b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186454 Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b43b39469f3044ffca305f0206cc9adcde03611a0fd8cf39b08d0230171522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186558 Malicious code in dependencies-tectonophysics-archaeoastronomy-mechatronics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773f15c9491f15ebeb5ec4694d22cd60e22a5c6baa1fa6d6cd492aaa193aebd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sandbox-kernel-web-good-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a8cbaba2cc17bb7d2f755e8e246f74bf867556708a1559e09e18f4dfad5130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-quantumfoam-markdownlint-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9581fff270fca351536c9fc917d7d441c7165b0aafae91631d5fa9c002c18fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186476 Malicious code in dagda-technocracy-commitlint-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d983e33879369dd931cad741e8149906dfd91e5b8a8b102b534b4b2cea15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-hydra-eridanus-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521f329c6d99d1fb2d15269f6524db9fd641f3520cec697dafc6d30207a059d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-hermes-greatfilter-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee50216fdddd2b9a4492a2b16543b3394b245615cfa15ef569ae5075774044c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190418 Malicious code in yakutsk-metalsmith-astrochemistry-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716ae5e8aa43202b32c8b4a3aa8cf544d3e6ad69c383911d5515b92e5ed44899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188790 Malicious code in postgres-procyon-nextjs-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e02623bc5d8858a0fa2b9d6b055451f4e014ae45fe30ff2456826691658198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...