Malicious code in antares-cache-mira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a06fcb11ea86032290dda80052d64d12f5c4aa1efcd8a73ce4ac81ea8c6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-pavo-prettier-stylelint-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef069690a1512a2f00962ec60f16b54aebfe8dcef7955eb47bb0bc8bb4ee1b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-quantum-miranda-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba820fbc0946efc9d780a1b72f8ff8568751a753d5d5e8f4e49fa52579316e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-gatsby-antares-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9221153c0d07120e15425cec2c46f08a5cc1e742d755211e828a0c45e653843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-atlas-passport-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c316ba24ee4bf53cfaa8ce2c315076b48305c248711325116375ce2d8cdf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-webdriver-manager-colors-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7046db12c93f852d9af106f281fac38327ff8b7cf8e3aa505fcd91ccefda5b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-dione-helmet-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d34bc74442aa852ab5dcc44cd33954927ffeba159d2a166a11da6e369b77991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-eslint-callisto-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03565cf035b694081bdb901d1a0031e7f748cf875b1c80f18cdad66698f38aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-halley-taurus-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a942ec4a2265c2589403d73c31d92b7972afc5a0720c36e2cdbfbd3b746274ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-bunyan-selenium-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbf6cfd3f3b1fe6e04e80d1120452bdc3262f19277791c0d067efd9c340506c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139687 Malicious code in auriga-remark-carina-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d619960298efd7b0c006a1c7b634137ff153ebb4843daa952880dc79c3f0efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-delphinus-rigel-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92fadb7b85c2e89b10089a57a32deeafbd27adb0fc4983fa35668d33e523531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-mocha-cassini-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77571f096590432980137da572d4687161e433a127694645e8b77a03d1915596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-iota-xanadu-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575355204cf2d8533897eda0e081bd9259ae4c69d20cf2c31ede843fd5cf5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-centaurus-eclipse-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab928e91bad85f7e109af50b8b181746c36455110c206e998eb3ec3cb8fc7a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-fomalhaut-cypress-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e610ac0879d7d61e6f41f0587dd9f753775a9d82956e80f4a8a486ae1f56d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-thuban-dione-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ad67153b6a753f31c031e3c5551906677bd3c5e5b020151ebc1bb704100e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...