Malicious code in google-bionics-flare-biogeochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721da62d8e5ecd0152fd394c7c4f7e74c17ca686615f02e8d31c07f1e323c48a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-atlas-non-blocking-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c136167139e7da8f2dfa597abcb7ee932a4d5968c1f94382ea87cc5b9e43128d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mesosphere-achernar-paleontology-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4217e8c9e039a28f6f66ebffeff5851761a959f419633105a71802b7f46fd35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cron-rho-analyze-socket-air (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ccfff0cb2760978774c62072d2c40b1b8f36364183047d5546f5c67d0fa50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185466 Malicious code in antares-iota-mysql-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b745a215730f800ab23e41a575eb14af8482a22bb5b1a6db13350db681a93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186963 Malicious code in figures-duplex-halley-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15be67b84b88a559dde218c9060dcc3b407af67dfaf55e7bdaf84c10c90c62c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-cluster-antares-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a79c5eb88dbf060771545f41472a61811c8817947e70dc0fc5cc821841efb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186102 Malicious code in chalk-resonance-triton-mineralogy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf63178531eb1e18ec7be76ee8d7757e6690fecc2d546232fa954284ad7bee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186651 Malicious code in duplex-version-polaris-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473d20a9e34bd0d8b61bff859c9548289744b91ff9d50156cf77a4aeff126ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187286 Malicious code in hash-uglify-cluster-info-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a3a53ec24253c6ab5d1ed24fd3cb74c1c53f7311dc887ff7434622f50ad233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186023 Malicious code in castor-janus-interferometry-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7debb1be3eb6e3754c95e06a59277a15e5eb6748a6e5d8a27a83589bac84d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modasiv-kulvu-baiucaufaibafuav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f190f763eecb5212ed4a20119f3c659470546f4c2788e2c27f25aece935cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e5ccca3d6ccd0a8a7db1d27b7852537679899e67e7d7971f6a352b946b27f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184774 Malicious code in poliaoz-aiko-akuiaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a00cf3750f52b5ca62ee4e9b54036426066b0ce455cf55de5e488206deeab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184876 Malicious code in sonic-ijos-aaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf74211cd544e2a039a5c5ed42be2ad10226c5357d47d6e8093347d686e1624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-oihg-mopigaffc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5142e8e6e7b1d40814c9a0156c955dabbd069d5ec35283e332cb536042a35bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-duban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e42f88a1595f21a0bc2101e12f805f8eeda7094b95a12b5bf0e0c33619626a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kt-gahvfaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea75dc41825423bc5155475bc6a3498a50d19fb4da5da6639d46d057ffe04d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggryuyegfjbsgbajtrefbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2394e7faf400ee3b8f270cc9ec7d59e442bd656620ba9bd76a98aedb3eb68de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181361 Malicious code in bahenol94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5d0bd3a06aa22b146d3191cf8f0e799c2c97d79d1b1fa6caacc8d9918233f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...