Malicious code in loglevel-kinetic-halley-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274a41db0eed5d4a117b9c311d74680cad370fa7450d02ee18f04633332d3572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-hyperion-callback-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9bce75854fa458672be683b1b833a43e8d11c30a04fad9829b766196694d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-ultra-electron-builder-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0816aaa7760bcc5127fb6d61c65977c0490633b576a152b843d3edcf79c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-miranda-rocket-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be89cfac1299964287ae5c23da35e42fa60b5f6efa38ee5baffed6a9235ab7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-standard-dependencies-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8f31cfaf6351f3bb47ad16bf392d1e308291d0085dd4096e670b4e63b6b8f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-lyra-ganymede-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6181a01a81a8c552364326cd66c46972737bab6c3ec6343db604561f155826d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-markdown-cli-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e420dffdd3b632425f0ab36ce3acc96e1a91ca101b3bf8e554a24c98aa932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-materialize-morgan-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c444fbf2a36d713c252f259fbddfccb959e738bcd08fbe47992b6bdb5d7ea552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-nconf-jekyll-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d0fc63dc21894114714a30fe30cff98bf7a4269faab536cc5cfd3dc729ee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-bunyan-kinetic-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464f9e02bf0e4f155da9c40199dbec9f723eab41656775a94271c27291e7effd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-oauth-aquarius-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8de2d954f47de8eda9218163def03618141071159de4561fc06fab93639a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-semantic-release-rehype-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00631bdeacc80c093d234eface25b68505d7f6b0acf0e1698b7629e22c3c3e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-enceladus-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5f2869f338410de2308730411a08670b694bd2f33a25c6776b19a038b1dfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-sedna-umbra-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b9009f151a521eec1da0eb97632ce95d3433ba6e5c443a04f0c827bc181730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-zenith-barnard-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17612cfd50e93a85ed1d33cee638b6427aedfad54b430e0162b6204261b9d079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-halley-phenomic-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10aa7281e2cd760e3e8919d3fa577ef77554cf9e2f9b5cdd818f2c38c3a0659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144115 Malicious code in karma-phenomic-standard-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e33101a4daa0982432ad2fd50dddbb6bf3d524f23b9ef2235151a69c67e0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144448 Malicious code in lint-staged-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8e050df62b8e9d79261093ea9636c346dfafd383a4b7cf736e5cdd571aac4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...