Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148692 Malicious code in titan-quantum-unuk-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442a3f0060056ceb4fb323c6c2eba78b7c4abb16e5826b0c5a13a0f9bd413da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-mini-css-extract-plugin-ophiuchus-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c013602c546a941cd797235368c91bf64594bd013390e347270c00560b5077f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8f8e6d03c3daf00589833a3797e608a89883125a45d9cff367282e9f6585f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-release-it-altair-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6978aaa136c6001fac1b87f9ef2f0eb076861ebec1150f4c4c776a2255576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-hercules-css-loader-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4730c20c72ed848b64de81d147fe71e37b657dd950372600a60273d31a4f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-node-sass-mira-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c0088d5c750f8fab1a2dc599d682e4ffebe0cebbc23360f042a0267bb5031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-pino-eridanus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-aldebaran-hexo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4819b15080774e0af4a0c079224ff1d422220c1817dfaa44d07aab13d0568164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-nextjs-zephyr-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8344c28a41b99d856235ce4061e3fe1cef579c6bc379248ce3e9a5a886efe76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-release-it-antares-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560e4dc28499f01e23a21ff3a7f9f9933e46e15c9ed192660af888fe635613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-umbriel-enif-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bb1f785eb64e0a40223521ed9ed051193125258100917655fcbadf2b3985bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-pino-ganymede-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4dd6328527d6a79485918cd6d69b55a14c19020d45678be01530f3fd8b220a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-sequelize-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996a8a8a5d674102c7d58d84406b55a149e636642c28b0aed62ec8ad7a5b5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140276 Malicious code in cache-mongodb-oberon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e800145a0cd744f6884e1491601dd0d0e4bb5235ae6f74b6e7ec2fa7f61cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144807 Malicious code in meissa-heka-wolf-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff4a59d56a3eaa154f024f1234b48e7c42b6f0addcc29a1998dfc7c7cc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147793 Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...