Malicious code in vega-chariklo-oberon-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e097682e36630b237386c15288de031a936baf46e72c3942302e068560fcf01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-mongoose-izar-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4905356f7d7660ea8d6db3a9a4cd083b576c9326b611a07f161c6363329e962e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-sagitta-rest-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344eaa4f44ff3990d404223172677fa10058ff4fc28d388bcf88a6e376e4df44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-oberon-native-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2b864825f4a4ffdca356b38f7bcf273c80fabd94c56ed108cdb5d80347f37e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-docusaurus-mdx-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec391661dae987beab474a5c6896851afb310bcc2fb8753cf7ff547dbdc624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-nestjs-achernar-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c78e04b8f2815e1011055a5b9b24b210d0f8b76a156c056807518216aac5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-development-gatsby-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12257e207cc183b1bc6f3fa3ca8eb3238b5e165a90b357b2229fcc888ef0a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-fomalhaut-xenos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d6eb4faaf6ba78ade9972bd1d892ccda5078e7cb3228cdd5506791220d4601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-nova-carpo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738f95f8f7afe379b25953df0583441baad9376a582dee727d760d2493dda163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-norma-gravity-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f7b8a72d54206ed61c1a2c3e0b0fcc1a1531b66a2e6bab909656772a900745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-regulus-superagent-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc13f76788773d5d2e87dd70334fb448f2b74ba088626599ff5a7c8a2cf7481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-markdown-pdf-pyxis-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7ea5cae85a41775934cd115a39006333c25adc53b2eb9ab24fa32990648c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-css-loader-mongoose-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8703c62d0a2eb24ba85a8ea86d01a9dac86e10e7d7dc524da76cb507bcef4401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-halley-vega-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca1d66ecbafe685efc60a6bc86dc19f0340f58aca3c399a481f5b650b9817e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-cassini-pm2-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eecf795ed972026476c3d217f8d763e7e2c89ff111b2dcd751985e8ac5aef90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-barnard-tethys-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3e6e2cbdfce1f99dac07c16e06635150adaf3cacb4524c51c4c46c8ab07e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-duplex-sails-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde8cd0c4f31aa574d4d76669ae80f087cec7b7802d04beb5326c07dfc6174b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-dorado-postgres-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfecd304fb29e3151b62547d5f3fb6dca1cf7d3e850787cf00409d38af9b09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-elektra-webdriver-manager-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fa4a752b1115950ffa2e6d7e6822d1f9b2148ef8084e6635d365390d004fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145785 Malicious code in octans-venus-fetch-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7185ffd095e4f4b31889ffa376123541f96ad34c8939f74a4f4ab17f5905aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...