Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143444 Malicious code in hydra-hermes-weywot-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f42a1d329c45393542f9e8ec59bed9df73c594eee4af007134fa1f73d8b3b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147154 Malicious code in regulus-phoebe-corvus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0151e5068dc5bce9091a6d205c89061fe9513c7fc09dd31cd433c06dd39012bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-draco-jekyll-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01c9fb39babc5aa2dd69c5b084a9258b783e750089a95ca625524bb4e440d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-spawn-csv-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216aa139732e8f8ebbeb9efa1d382e08a1049395c2a03bbfb6ae1873421a9b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-enceladus-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f303dc4fc3654d2483f1bdbe2bbcd9922173b5307487abd9154297d5ce82c078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-promise-kronos-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9cdc455bc15e8e73766bcb878c564f0d199998e4ce16dad81a8fd1e399d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-atlas-betelgeuse-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6a66f49bd2c098c51d6b64c9f1b8c603aeebf941927a905ed3e84b7efb3e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-zephyr-hermes-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5312ff2f2eb883e7009af94b18a0548fedbf555a65fcc27a3bf2790bb616e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-redis-tool-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c76cbb410313e8695796c355998093a7f80575a0ef4bd8350a10b4794b4192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-alphard-procyon-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4db9b7fc26a318c5afe0c72ed6affb3348a161cfb0bbc43dfd849259068a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-nconf-celeste-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dd2e527604d64e34551faa5600bd57cadd35c29ac58e7f998531cbc0c9072c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141540 Malicious code in deneb-convict-loopback-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b47cb552bd2273944966f97cbddfb7938062c25b736c668a27c6a067a040ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149057 Malicious code in ursa-hapi-nextjs-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc029820500dd4024972c48dd57913360342c872ec20c9566e573b7bfa03dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-venus-fetch-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c734b28d4aee59abf5e705cf6d757d1ba1faa5d4ae58881d3cdddfb0b0d70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-gulp-sync-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-release-it-altair-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f6978aaa136c6001fac1b87f9ef2f0eb076861ebec1150f4c4c776a2255576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-jasmine-restart-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a0d9a9042d8fd233d6e74a451ea09d2b6c63f1d29c3db92cb84b1dfc400325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...