Malicious code in eris-chakra-ui-sass-loader-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb06093fde32832822f36661642b3ab387c58a1ce995ae5993df5d4f745159fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-pino-orbit-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3d643fd5648028f70a716eb1d7569724b28c6a112684f9d1afde022e9ca578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-neptune-update-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397b34418700a7519cb7464e8e06f7903ea7fc035617ff240992e51e6953896e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-got-graphql-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0e5b4a97cfce89e6a9b2a47f4c4ad3400f6d303f0c4361be1512f951a1c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-centaurus-mira-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e2dadd319fccceca4e88f8c24faec4850087a86b14258c7cf356a8093833cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-flare-duplex-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339da900e4fb0af3c00642893b3a1ac2ba154cdf80613d3f40245ecc4fffa896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-miranda-scripts-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0edd1f1aeb6d56a2e9830a51d80927d72aa295e7e75670337818f6d28d1f6dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-proxima-node-config-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b732624153fce00320a627aa1ffdc3de2a3f8f88263b9a60c079022a0f486d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-quark-semantic-ui-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f502f2c1caa65093d90dda5233d40802fee836fb8ad50de5365505884689d64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-comet-carpo-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3105ee9bb6ac739ae73518d846f54ac4063dc0314d1af323b3ed40306377a498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-dione-fork-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1612606737bf83d64a4d1b8b14f9485992572bf4885bb0055fb0574edbe4f48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-morgan-gatsby-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554139500406b867d6abc54a5cdd58fd294ec3edad56fdbbece0f3987411862d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-kastra-cli-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d2738c6701f3cf8f2dc39e73ecedc3b6742f1a59ce0ba3a0544ada76ab6eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-capella-release-it-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d598619f1bafc4a144ea9b4ae5909cdb7e126952c9f3d57b5ecbc92654451586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2c7bc08e32678dbc7a5f4c90b7c8e47cbb9d8fb461d41c5454e9bcc13d054b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-janus-lynx-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0e765a02a79d0730e5917bcf4738e27a5f4bd6beffb7dafa057bc1cbb81822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-concurrently-process-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f20f6ca0676e9eff129a6b427fe940ee7a2dfa15373c2680bc0f47c155ceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139272 Malicious code in aldebaran-cressida-morgan-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff470efd34f66915cb29fb44804c26b3905d8a9b494cebe1dcd75a1a0d180f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...