Malicious code in aquarius-webpack-ganymede-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3c8839bc40bff2fc831eed2f2f16a2ede89e3ad0670e7e85bb2645c985847a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142484 Malicious code in figures-upgrade-hermes-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99694613b2b8c216e79bbd7036cf9fe7165bcfc4201aaa8525a31d86f58b634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148821 Malicious code in triton-pegasus-less-loader-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31480a225cfdb025681ed57730f33c5be84210ba940a9c5001e84b76619cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-grus-fomalhaut-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd88392d2ae94b49bc5758565080c4fbdd4026c05543b645b2d954d03994031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-iota-materialize-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8814d15fdbca9a55d84e73b3267423a3ce4f89f505a49f9cb4f368e08ddcbb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-build-norma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11f854a4c15692adeee2baff8f05d8ac9ad20ce7c7f5c2bbeaea5ed73bcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-solis-fornax-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614d338c1f227a98f6e8b14c4ecab4ef110908f22f983d218d1b67e36623f855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-eslint-plugin-stream-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375e9010bc941f62a7a27223a5b5bf6a50bcbe8fc6791230809991387993d537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-heka-loglevel-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-farout-corvus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776aa8f7c9d309fe1c7adf4274314326d23bbc25bb64f2734590f54fd5bf25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-auth-run-script-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ea8d5247e207793334085e9414f90e48a345f11899bb3aecfda512eafca934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-auriga-inquirer-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316359bb885ba6987c0b0f397ef7bf1642c823b88557edd8f9928acd8596cb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-farout-nightwatch-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3ce96e3b741714e24b907bf10a467fdea25a56b6283e5557181041c9c11b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-websockets-dynamo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db1651cee518f3de25dc819fe2db60afd978bc23699dd5e3ec6371b5530357b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-jabbah-cross-env-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d06c65dd6879c5a5f056def2f439bf2bbf1c84c6df10a32dbdfebb777c6615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-chromedriver-protractor-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a599648ac719897f63f6e24866d452e3982c60465ac1043e61f27fab45d85634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-magellan-procyon-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea745c0b19f9a23301c9ba55928e5093bc020de8366bf1e1ce1ef3092e79c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...