Malicious code in publish-materialize-spawn-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28ddee9609b9433096caeb55f295ce863268d022ae96020a82ded6c378993b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-despina-pyxis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d399d73429d9ba27cac764fcba3869ce6e10718127ced0ff53bb89d9614c692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-titan-arcturus-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a657241886fce2aeee3b69ea394d2e4b5aa9e42a1a71eb71d997f5972215fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-relay-docusaurus-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca0bb13d341b2b03e8500ab818c3218b88e9a070b490ea0f91ea27b367fc097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-subscription-callisto-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9394c2bac5a142593132709358a31dad622842e119d03316c93ad3dbbabad6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-mira-node-sass-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e53c2ce75884a9a6585371f9a0621f88401c19a99cbc6608575c06f39381bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-proxima-juno-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50866ac7a2fc8217495c8002e3ddf8b9a1da86ad209ed146a267149f7c54a5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-less-fomalhaut-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3716a2e0de7505b106fd4744affb54a527a38051421df6fdb053b8c31cbfe374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-bunyan-xo-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edbc209cd1ba1cab6f49ce0e8c5c7ce4cd297e85ac19b2bfff0c1c77377034e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-protractor-json-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0cf775eda6da5ee72ec9ec108786c8ff2381ea7d373895eed288b9c05b03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-enif-redis-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 358c9bda4686aa3db9b99f3939d75fed692f50899fef39f730cbfd6189f1b391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-stream-yildun-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3b624a260274455e78a036a64307a519eda97234957779c2f5313e1a531af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-astro-library-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef35db8d4a04cadcdd6e1d033c10b92183e380161dd5773465e45152621bf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-vortex-prettier-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c882e4a8661c4107208ded0cf49edf8d4cc80db16d01ae3c9dfc61d33fae1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-electron-reveal-md-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bc2848e7e40366ae4424bcf5d0323c1a8284f8c81db4e7d58b36a05f3f2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-loop-server-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fbdafc8156cabe53e445347a23008ec455f58a7395faf9b2ac5c1dcd603c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-mira-carpo-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6368a46c8d4b8201f4df6cacad6539edd4ae6b601e9188e95b4f4417da8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-bellatrix-husky-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2973f9118f939e46c373ee35b5c10d61a18a3c353d952bce4928a4ce858d4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145172 Malicious code in morgan-dione-dactyl-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95000699eca91b0ededd51164715e83893012ebc80da1d3d2bd604416d49e9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...