Malicious code in auth0-carpo-npm-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96538ed22e9fff64506efe3185499e55d1ce7e490f55e0a7da4becfb0b9d7921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-spectron-webdriver-mdx-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b8d470d321ab03a10ab9f4052b8c7b555af0f0125d6f018b30dd015827bbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-procyon-nova-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4634f3def88aa52f773325b3b73a38d6f4d42314962303a0e9dc8a99ed25ce34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-blitz-development-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-non-blocking-unuk-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e7113be6e992e7cadba902c6cb009590caa63d99ea689540e7367b1cc72c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-nuxtjs-mira-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3258b064bb655bb212c29f171951d33033c240d6fe5dd0b0bc92e9898d2678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-leda-pino-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8243a29c368f8aad9271546a6bf78f1aee26bfa5e3396bf2db32d0c0828de5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-antares-altair-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f3108b52e57e82f5819ed94c64af83d8e0e7adf6bae76b340b85ae6f7ce636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-markdownlint-npm-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73e26256761af7533779186f15b847cda32f6523b5e531c46bdd00586275461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-csv-gulp-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a880b2792a6069fa0026a9e74e70b5b41dc7ae0ada9b9067a2c3c1dc94156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pino-pretty-pm2-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb5eb2f0b3372ea6bc8e5aba8a9ad3a334a244fd1f0d9dc4913ee53f3e7fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-html-webpack-plugin-leda-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb68b97568f84089399c4178cd2addd4a7ad438f5e102df3bae522b903b5bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-adonis-jest-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ce7a252c8fb466cb202f8d2441a363fa351a5ccf8b69a0cfdd48a0238bb6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-development-avior-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6100a1aca3472a8e1da2302a8ac42b4ea6b7790af85fb94874b2750fd4e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-betelgeuse-eris-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bbc248434dc37daaceea3a7f4dad25b6c8753a252d0a9d17ac604927b4d765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147993 Malicious code in slides-regulus-octans-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24123f446542f018aec00c753c2241a8bd907c303c7f1c2e60590391fa4644e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141897 Malicious code in electron-builder-async-titan-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c690f72ead4503a4b4b6d46e71c1cb99c00b8cab8ad786b3f3c7880a8b8542a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142270 Malicious code in europa-ignite-frontend-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f844cd8342c0649782b39526f0d1861ced333be6760ec7cab2df23dd344408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142266 Malicious code in europa-enif-frontend-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1cbb11bd1538059fd754625642c6b3a833aad1d0337b86d54315327f193a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...