Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-changelog-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4530a5fd230ffc6615d6cacdc70a3aba46b71e960378c617d3a6f453067a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-mocha-blaze-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb813f3180d8c2a3d291e70bc1cea255754fd1747760b8056687de594dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-graphql-backend-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95f79844ce145d2a3991132c10d022323b047eb69d35edbb4b4e3dfcc77f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-sails-inquirer-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f749a1a37d1634292491cb74be61f5db279766a342da292ba9dd32fabf4394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144175 Malicious code in kinetic-jabbah-chakra-ui-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5f738782dd363d152db805403c855d082f0f118291fd3c2a9d542055b894bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142000 Malicious code in eleventy-kastra-cli-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d2738c6701f3cf8f2dc39e73ecedc3b6742f1a59ce0ba3a0544ada76ab6eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149747 Malicious code in xo-dione-sedna-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2ecae7d1b3223e720f1f67a623101f7645bbf0563fa8e4a75328b195b68191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-mini-css-extract-plugin-vuepress-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45b6aabd8e4e2de023abe040f64de12f1bbf276ce13c6d210d77d76db09891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-webdriver-manager-celeste-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa7ea599966a12e7050333baf3e7fda0daee36bcfae5ad1fdf31c994c1185f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-cosmiconfig-sass-loader-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a3d3ea8d49e0103a6025980fe2ddbe0f3fc5fbfff21c014343f67002004afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-luna-solis-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bba943fa330cdb3d3878a5ffc09d78a6df573ce8fa64f6f6e36f25fcdd1d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-rollup-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481b7faa3c35341d66a7cb67ad739c59a56229bc971c291345496b56f4668ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-halley-ini-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0009d5a72a5b89144c27e840976ebd4456b421dd9a9c200dbb23fd1e7d40ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-promise-rigel-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9c0d0c1484d3987510685503adf6ec928ec165b2a22fa28c792c09a33310ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...