Malicious code in mocha-chariklo-callback-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3aefe7e0ced759fcb278ff76c3e7e7bfaa86bfa349f129514e73a76812713f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-xml-oberon-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fba8531598d663efbbb7a6d963ddf7302c0641020585c948ea3ce54c934dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-cz-conventional-changelog-meissa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac21f13b4b7614fa1c9af0606fd1809d609ba57b1a9f0340f11c23f245f30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-aldebaran-aldebaran-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fbad0e36204591df10ee8666cbe61cee4d9d90e7623bcc6a1c10593e34ea94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-sirius-sirius-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b141ae41b6f4e29535c0acaa3fc6a2ee6123053d855ff572721b1822a26452be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-luna-mdx-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634f9f8f23b87d45c52a2986d0a62793f1587cae17fed5dd47dfbaba2950f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-charon-server-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925ed6bf743b9330633d7e1b1686ade91f9fa24b0d26b3f6fe312522b3ac9d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146088 Malicious code in perseus-javascript-update-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdafba81fa85aec8eb3d74a182a1360b3ed82de57bb6c85a9575ab328decd44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148223 Malicious code in sqlite-configstore-remark-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dda14679a98ebec10e2ad050d79ebedfb942dea17c3e772d9a36b935b88b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143230 Malicious code in helios-europa-soap-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4467f1cce390ba3c5144631bd0d5d727f271666690fb351ccdf4f3dfce29e96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148746 Malicious code in tool-nodemon-hexo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa746e12f6bbdc079d7d6d228cbf3b02d40db2940f0c331a16a721ac453d99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-tailwindcss-orbit-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4085287e53cee21a1b2871fc6302e58161bc1d180e0510e2232091f732f96c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-auriga-janus-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2992b6a3d12d6895e43e9d1cde25e36dbe242d6caedc9679bcdc7ba3385039a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-neptune-meissa-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192ae7b04f04285ae982c76237dc726ae80e3d013cbd96c0fe8ac8e70d13447b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-winston-schema-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fac4ee9fecd205ce5a6a0d6f2d2fff5c73dc9b66e1cfa9181d4316724a6a246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-charon-element-ui-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9faf39be3002ec216c07c9e7ca68ebb3371f6d58ef31de7ffe9ed15eb15cb823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-firebase-websockets-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658595abdf701a1efbf2d67916d95653b525ecf14cbc26919e962c9b88b76554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-elektra-query-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500f63431257f1c06eeb57bdf809169a3a833961b9df76c544c642bbf00efdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-dorado-cygnus-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20dcbe7930e4780eb2a5484ca95bfe14521c72f890429e81afc68209d96c2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-epimetheus-module-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e5beda10712a97e1605af146abe0abe0195f65d2c18776867fc375b4753ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...