Malicious code in comet-gacrux-pm2-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-xenon-non-blocking-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e573e2a8a72f5fdcdddcdb295e20389f2b205a62fa514b5699b3b3e88eb048c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-loglevel-deimos-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a15bdf3c8662d095749c92ca6e42d874ed013fb01d41651bb4bba8068a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-changelog-cressida-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-winston-octans-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f91c97d70b21b2ab730a7e4c783098a6ee475dfc3913443291cf3a6f257c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-repository-mutation-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b893e5d04b7484d3c28cf6b43aa463dc842703409964fa8d83ffa865a9bbcc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-materialize-lint-staged-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-dione-dactyl-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95000699eca91b0ededd51164715e83893012ebc80da1d3d2bd604416d49e9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-juno-toml-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95295e519e35ecd2d623f7afac167f03d8dfb51ce411cbc4ef9c11a77bf1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-mocha-atlas-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd2746d873666f4365b41ed0fc9271d71a3480d6f86e815799cf9954bfa49b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-registry-proxima-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec56fe69eb0221d54ba68935b5267e8c0878e966365c32ddee036056e961c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-version-lyra-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b102d936e27cae1f4a4a0d270ab5454a9315e36ace9caea6d9a6ee29acd289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-nightmare-perseus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddeb1bc1a009697c0a34a92327586e0fafa7ac89a758b39af0e3d7cfccb123b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-quark-native-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d573b248cb4590647cf0dcf614db037deca09356997105e212cb80e7c7dee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-bootes-release-it-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f90ebc335a7deb65c4931a3acab28e00302095cd25fc35c9c9f3136c512ae0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-start-electron-builder-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e73ecafc9499e1568b2977d0dd9f18f353acbc15330cf67c197d36a5ffec75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-prompts-thuban-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a3249af939c3e509102ed62de1da79187ada577499b73ff4db43ef95cd75ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a458dc1ac56e93a769b5ee12b7dfce2a272d1d772247ce5792ae25d97b27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...