Malicious code in dynamo-leda-registry-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c347466e8c07922985807bac40056e427e02532dcf757e70cd0833d2f05383b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in singularity-rigel-quasarjet-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf17252b6c653ae675c4bf9480413b571a70ae7390302d63383fdc0b937794f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-adonis-dotenv-parse-variables-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f796a64813b30c1c12b1198d74b70b219329a69f9abb0697a70bb9cde818dc7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-uninstall-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbfee41fefce5715d914720f5044a88f951f4b0361bc31c803542153c084c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-fornax-chai-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f147618afc46d2f36c90e55a3b8cfb1e6621d8a22911f93f8e55976aa29866f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-schema-unuk-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef95ff16cdf95db51f17b07305ed739636baecdca77c9ac45f76f5a27c7d581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-heliophysics-commitlint-config-angular-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3142a8b96d0c8015bd6d17f6e9038ce57ea590fb830bea588d1c9105ba3e48ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleomagnetism-neptune-jsonp-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00b7c4e427afdc185348daac0c7d3815042fbdb19ac15e8d7e848299230aa85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185556 Malicious code in areology-polaris-gatsby-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b703fe4c7e4dcddf7c314d7abd66fa38950215c0f1ce19c252e7a5a8c1ca487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189198 Malicious code in resolvers-gemini-abiogenesis-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5dda2fa8b3e9bc89cce4d92ddac40e9bb5fc020c4b5cfe2e22051879511d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188851 Malicious code in procyon-yaml-figures-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7740a3ced9536b2d669360d3d0007870b01aeebbcd11690bd66779cdad44da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190011 Malicious code in try-phi-lambda-public-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6bcc756a01c3ca9eba1d866d684677df2aef5dd2d72a7a333a92b7bbacde80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-framework-gacrux-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd2a9d5b7263324033c43fd921ffc4f87609c2d056fd9ab0813eb4da595dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeta-permission-beta-short-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150e97326cd1d07028267b635aa4429aa6fd26cd6649457e7a1bcf41e904538c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-registry-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e56cf6f9d386fc0387e7eb45edbcbcbfbc0d7739f3829b7448f383ad832400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-eslint-config-materialize-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14e76d31b688dacef1a496176a9ca1ea81b594b81b2373404d54a5de86a60df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicray-draco-interferometry-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e5c6911b77d8405e431ac6d9229df453c50c824c01099cc54520e00d557257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-cosmicsilence-heliophysics-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c5107054f3f6315613a6ff3966d058a30d72d0ed15acf6ef1bc5665656306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-got-telesto-accretion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbac9defc7fbf4c08b122aec88f87e0ce104ee49d981074fef3a67e0b98cef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-sequelize-oberon-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac1c00d3c960ca9febe5f3d2a666ce6739ffd7071f21f9b258edfa785a39a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...