Malicious code in eclipse-nightwatch-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0de3858c18672b89b9bc94035d6db8bcf216c001f9385e80ea20767b99f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-chakra-ui-release-it-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b02906e9dec6236ba4177faf7870709eab530f6e8617c44e7a1a2b31716e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-public-unuk-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d5a3b35db50fa8d9809095d9a28923d3f8749ef04d21133640662959f81ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-antares-gulp-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f830e51df1843614ef70fd9b92f0705b3a992ba60d266e1ef81146b23c6e16c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-react-bootstrap-meissa-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf93686ac0c5d7e54ffaed0b8ea0486e846b54a3e4cf06bca794c4275d878695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-centauri-ceres-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4292f5a1b31a9d321a2eb9d21512f8235d0431796f54ab26eaf817f2c15b8d92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139503 Malicious code in apollo-cypress-hugo-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758c19faad9f0ce115ed507c1f4121e5682f2b0efd2245660fdbc2de7e4f9914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139872 Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fc500675fae07b9a876c104374b27b82820a5d8bcfaad02b275aa0426a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-wasat-miranda-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d06b6051c120ca10f5da401219d022703a9a252a321396da1352869368eacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-cosmos-sirius-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71aab97e6d0aba3a01915d59bf857fdf784e8ac784530bca1da797ba9123c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-rollup-plugin-buffer-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1699050cc592e2f8d30b48677a2a5a646c3a34aec6b04b98382047a46574ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-semantic-ui-query-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772e26511ca75d4e3293ea2926cbb7404b0e62d26f1a7aee402169932f39d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-aurora-jekyll-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c37198abfa595ebad14a4918dff72d195729333be2f1385ab33554a1a5bbf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-quantum-style-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179bc24cc0846febdd1660ef9caea52e3cd7cc38814851bd94acfd20e3ed0568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-odin-registry-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eddd33c9381e7922614632b9aefeba8762c030dff0d88ac0c3d0480b7b7506e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-proxima-juno-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50866ac7a2fc8217495c8002e3ddf8b9a1da86ad209ed146a267149f7c54a5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148932 Malicious code in umbra-phenomic-electron-builder-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424a9fc94db72e7f5a82ed92d95569357de700a247032fc96f8cdd8b81ec290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147447 Malicious code in rimraf-concurrently-release-it-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a3d550574f8a05abf6d282d8cf72319f5b6ce6dfd100ffbf7cb35777ee8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146662 Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efad6a2acd2fb00980910c0d99b6e947d7f3600072912f8b770551b9a22bf90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...