Malicious code in prompts-ophiuchus-indus-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d007e985a3247da7668e6a5323b5a2600c9ea75aa3ab5f68e692cace8f43da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-relay-chromedriver-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096e192a224e6245da34ac9aaabd4b13fbd2de99af1246befa43a62dfdb33cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-passport-playwright-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392e586b116239c1035eaaaae1e6a2af0e52b68b3f756a432e2b33132296b113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-ora-despina-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a575f4f0b31402aad3a9359cc6ccbee516874d462e15dfba45ffd8d8e186130e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-cluster-pipe-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e5775aa128ed1fe7041d5dd2e99b52daef172c04350b6ca8fe5a0a45fd526e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-mocha-request-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02491b09b3446d54df684676d132a42d9464b0f5c8f0330438655a1c2bccac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-fornax-loop-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8c267bf36498196cf97e6013a4a157ba965ddb10bf798d0ce5fe433650a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-element-ui-browserify-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d0b6f9f5e1770e291ec877c626b62aa881b0280499d16c476996f731183073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143397 Malicious code in hugo-react-bootstrap-nestjs-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afec8441ea00da53d6434b7d12ff98efb7ce3e538f9991c06c260651f60ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148984 Malicious code in unuk-sass-loader-nuxtjs-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98c1aecea27a26e074cbf3b04cb9c22efd7f403daac4a7d58d309d2717a226b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144795 Malicious code in meissa-bunyan-loop-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2570039e57cef0e6475a2bb439694e2b71ad50221717be387abd3674716b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142418 Malicious code in farout-kronos-xml-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423a33a4e9dd98bc769b36cc4b6c14b7eaedb1a553c0b0b259f101e7829530ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140943 Malicious code in commitizen-start-radiant-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86fb0200eb91237b731b34977008855e4d540ee3c1840f3df98357cd0215351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148056 Malicious code in socketio-levels-izar-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84eff04b5c572409de5edfc7288ab325e0b895580f68d2370bebc0b185e7edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141979 Malicious code in element-ui-prettier-css-loader-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9dda515544b35b86895b297fc0976b11b17da09edfed790be05a518080f8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-pegasus-ganymede-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65afe8cfd85ae35917f7bd628db75ee6071d0dbee2b3c66a8420d9dcea9117b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-antares-rimraf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93627bbc7ce4a38b5911bffd0a7a9060f9c39f63e3149eb715967d6cc7c40e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-tethys-vulcan-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32ac2564f1d4f6443099497e33d138435f66b50f4aa973b0c5768985c186d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-global-docusaurus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bfcb6442d80637c44c046ad152f6906b1d7c2c9c003ffe0801fb69f3354a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...