Malicious code in subduction-xenobiology-websockets-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d162d50d84dbe43de8e35e175e07f1bac8050e4acec2b8489426a438367ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-got-telesto-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbac9defc7fbf4c08b122aec88f87e0ce104ee49d981074fef3a67e0b98cef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in authenticate-array-cluster-mock-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad84b36cde33af206233558b2f96f5182a2836be13c44e5c3ee34f9e9e69a6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-pipe-stratigraphy-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a737e899eebfc93719ad05ec9c57d48a39e9ff003452bde12f51658c501679d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-virtualreality-wolf-paleoecology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb522e4144e64b1723fb48ee04de4216c3ae57a7bfecf7b921366d8b3bd5bc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-parse-socket-new-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793ec543bdbe976b0f5182752f5ddc02ebaebe2cb361ec798fd818b5da6cdde9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balance-dog-throw-balance-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e2cf175dfcb256e4e04e8d82f344e971002226d736740c3e3050cf4aef44a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827f6e45379c72e896fa2c8a42159e2ada3a7553eef28d5b9d72873afc1ac74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-paleontology-dorado-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbe070d105e81ca92bdfca6f8bf4a4d5c2018fbbcff99c7a74f916951732f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192e1b1356672c3cd9c2ed6782552c38b1e7b45566fb986f074c3a22823a61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-asthenosphere-norma-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089629ba9b62dac98d9d30189cd349c71d46b60499c74e40ecffea71b6e22c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-holography-wavefunction-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c09fd2453e24f48107fbf3d8ce34cb5c157911aa14bea9e03e3c6f7a6097ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186077 Malicious code in chai-got-pino-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4038eb99c7a3c61857cd8ea91f7024e5f1510152d4f3c6577ad77a0bfbd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188680 Malicious code in phoebe-yildun-gravity-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e7f8707aee62cb3960c90f21928bae1147bd91c27fe32db5fe802a976e89bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186923 Malicious code in export-psi-zeta-upsilon-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f1ef51d519c74b84c078dc5bf56f9e105291710857d19dda790846f4d0bccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188700 Malicious code in pino-cygnus-eris-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccef55ac735774cbc37e3b16bec2ee4709f84fb719b589964c9976109baeea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186667 Malicious code in earth-visualize-abstract-beta-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdcb9e255cb40cbc9b3900e368a05edeb31be8f58530b34dcf7f168ad49aed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186177 Malicious code in cluster-child-process-remark-hadron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0174842527c29694de08b676a8177ac52e03dab4a1db27c0edc59945ebbb6a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189882 Malicious code in test-fork-gravity-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd155e14b0f3d8707048a509a44689422afdacf2b452915a05a5894bcc2dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186718 Malicious code in eleventy-delphinus-figures-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0224ac3cb23c603d157129375e0a9a49860917e8b20c5c455d7932530d367bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...