Malicious code in colors-xenon-non-blocking-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e573e2a8a72f5fdcdddcdb295e20389f2b205a62fa514b5699b3b3e88eb048c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-astro-axios-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715eb9977b60db21113d42c72537866a7b61a77c97d0d16502f45a0c2cfed184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-juno-toml-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95295e519e35ecd2d623f7afac167f03d8dfb51ce411cbc4ef9c11a77bf1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147795 Malicious code in sedna-standard-element-ui-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ce0f3bac1b17d65b475013075f790254b11c5a89bf35d1a2c597f700d9e42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140320 Malicious code in callback-vega-ganymede-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba68ef1ecbe1a9f3230f0d417d74740cde111180171008aa80948ac046ba77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147109 Malicious code in redis-magellan-hexo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d306ee87ba5effd1c09c4499374cc41c683e9287de16007dbd8653665a3c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143823 Malicious code in janus-nightwatch-library-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccaae8db8792428dc7440f4cee2f05316ffa925f7b96e7cad444831d4ce99e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-procyon-xanadu-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-nashira-achernar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4483f30bf3af73574f51a767375f451474ab54c0ac90c82e2e69c9fcd2d14b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-child-process-halley-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372d84cda77d894b3852a08cb80f633fcea5878af8dcb2e77b36f8b26f4e35e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-kastra-webpack-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da31a94dea166f9732544d8bc74d15fb23b8b8d49f3dcd8465de86a7b8ba7022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-magellan-init-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc202011ab34d0dbcae049b25c37ee9bb257b42f38b751c9ea4f656fa99a47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-ophiuchus-eslint-config-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70067f59028c148db888ac9fc27d2a76217a56f8ecedee3af5f4f81c07c29e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-vega-hydra-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe645bba34b0e4e8d58c3cecb6d63b49c6452156e804d022ec335a18e9eac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-google-markdownlint-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccbff0b4a9e34280a93c9e23366cd604820365283d000a1a98870a1d2f53f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-hydra-chakra-ui-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11890f1057cd031f348255b194e3c7423681fc7aa622fb91bcc95d904fda02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-uninstall-mira-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e84c856cd0e9886740c1235d889f235ed09f42e79e4b38c5ce76c4e8b49ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-wezen-orbit-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff9fc080d726744bf26af498f5d41c74b318aef7f0bcb6a90d9de1cd991687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-materialize-hugo-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc0248dd71f94de549dbe0e1436fea2544422c6001231dc2ed9ae2d21e7618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...