Malicious code in helios-grus-morgan-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cf6eb17521dfa305a33e0990d686800f538681feeae23d261273fa6889f5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-sirius-triton-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba9bfee3d27850afd5afcbc2fd48b4c5c1a2dca01fdc00594dff38486c92629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-fomalhaut-postcss-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31c29c2c964ade0090610a05400e3b5e75c13d1d4a58e13bfd5325f5bfebf6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-phoebe-auth-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7249e2942909d5d7c6b7debcd3e3bd438b8c5c51d5e1402a279e7c5b8b434d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-scorpius-kastra-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206989ca281bd8486109bca034dcd43687f4928eaf2c88002dbd6dcc613c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-mira-blitz-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f4e3c4abf2d34bf952220e9fd5b0a2bc93b6bab7ed1e7e4bea7acb27ab3cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-got-got-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883b4fc41b4c70f7a904bb5efcff4d34e0ea12b981eb6096971d9a6f3b76d4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-flare-less-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25df43a3792a824048585a418662fad658d8e9fdd44416ea8f86aca06512410f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-sass-loader-ursa-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675c72de8fc9a1ff74caef36b7f6593e7d48d1c420b8d2a3f9582ae0d251e2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-algol-websockets-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57bfb271ed0be2a37c4903201cee169c43cb8a36467c7594c743bb1addd9942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-ursa-bootes-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3245fc3adbd9e9852df9a8e88db35cd0e9d70c380fd57dcb2a3c0dc2e340d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-css-loader-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc9b93c027937183923cf0c75079a363eef9f31123a01c0eae6813aea03b2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-impulse-taurus-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850868fe58e6020e10858740e633ce556373271d3b938b08887156b35aa68833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-scripts-leda-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab0ee40b5f0054f0f245c73295e76c8cba5d51b98bf5c7313397217d638b3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-tethys-vulcan-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32ac2564f1d4f6443099497e33d138435f66b50f4aa973b0c5768985c186d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-global-docusaurus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bfcb6442d80637c44c046ad152f6906b1d7c2c9c003ffe0801fb69f3354a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-repository-browserify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f4787bbbd170be4d0f76478b9c29f56d18d71a9c85eba70f5c44df767291d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145397 Malicious code in nestjs-google-websockets-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6048757c791315828cf6fd6fc888bf6104dd0e50d276b6185244daea12ef11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...