Malicious code in gatsby-enif-tachyon-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3e1fe40b9f4663cd8b878d886d2d8206a84740ad4a30ca7055e0b73b99ffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-middleware-koa-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa17e71d0659ec9eba2081fe5d20c537b2421455d8e4534a085af5fccaaf246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-canopus-troposphere-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584eb4b309bb6c33a1bc2192ae348841020f6161d30850480bc2940b43f92eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-eventhoriz-areology-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69773d9a5c3889d618b425370e12b0c6366104d947651f8e479e7215d1ddd1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenobiology-materialize-epimetheus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bff12111e26834b786d9cace08b98ae630c9ff4cad6ee080efa7afb0328019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-request-hyperion-subduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805221cf5a62588c1c2a9e61e0875d0fc1e09945259c7a29162ba921752675b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in star-permission-parse-assert-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fb324b2acae3a24eb32deb53820b89c37d9ead245b8e2cfde66d4842fadb29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-carpo-carpo-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13b35cab92cb87cd2a1275e1e555ba5cd6cc2d672f9915764840e26cd51e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-cosmology-remark-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba9738f114ab057949e61e21d3c77d487480f1464985e0f8438d20481f0d2ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-pm2-quito-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6a2241476175f24051ca066e4ff84ad630a0f1b8228d722434b963af85321d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in earth-protected-gamma-test-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607017a42bce9e56670763a33b409d170584375240403b448fd7b4741454f5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-achernar-hydrogeology-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f9c8b7b6c7ac3d90c14852c9af7b699e2f403d051ace3c717e11187e061acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-ablation-ganymede-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a403cd335f4f51180f5005355c2b51c318cce6d0910807f0b962298e25ee8ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-package-bionics-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fd405157c2817e145d01f5a76694010a00124749169424ea157e463f04adb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189009 Malicious code in quantumfoam-biomimicry-sedna-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34178369b768ca695f8d713f406ff7b59fd866b6f19b4cb81e6d487e44b50635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187056 Malicious code in function-fast-error-private-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9981a842603cf507c7d999a60dadff6bc66540d629ab5b9de39196574c5d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186955 Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acec897341872c6625b66acfcbdd4fa40c13d1f36c0542622e28f823bffeaa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186655 Malicious code in dynamo-run-script-jasmine-kuiperbelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92bd3baefefc880668c3a96678023c15fddbbe7e3f7a16d1e11a7467fa15f356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187776 Malicious code in library-capella-tectonic-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad6929a0d0d976d5d901ed69745f745aa60c1112cc89324dcf4401cade4b817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186028 Malicious code in cat-big-code-star-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f3f6f9d454212a45cd8e581e11bfd884a5fcbb6280ff321fad59393e2c987a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...