Malicious code in dotenv-safe-astro-sirius-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cb87dd0f0cd51c19f01a21a145760bebc9a3e39e9fa193ece9d01ea33fb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-ultra-electron-builder-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0816aaa7760bcc5127fb6d61c65977c0490633b576a152b843d3edcf79c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-spectron-webdriver-chariklo-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306a2d3ddf0c3515faf2f4c8ac4fc3255dc3608a7fdbea69cf7955e99a9017cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-ganymede-gravity-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55074460638b56fb91149c55951881aaa11a024c8c662b43283932a47287fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-dactyl-duplex-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83d8f4360296ef119b2c24d37c9dcc2f776e60772206aa423b96d8654dd84b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-phenomic-eridanus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b4edf03fe4eb9a57ecb323f2a9f3f66d89c70eaa645d4cfdf4a30ac5e9285e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-rigel-xenos-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea682a7772329c2722aec8ab0885f3f2680f15f20afa3d09c05cd2b909698d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-parcel-forever-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbff56665ae37d90628d5c06182c5e45b39d4b4921a2f7476a3c3cabef7a62f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-repository-jsonp-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf60f3ffc03e9fd4679f63b86091147b8708b3bbd2fc734c2156f7e3725ddb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-ganymede-delphinus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8e49b226e129d43087e9bd1e75e9d3b24a46a2df28a813885bfe994d28e183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-pulsar-bootes-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f143c148c7e4c8e2bb84556a6a8e227304fefdc3d346c1b959bf9c04f6f75559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-exec-uninstall-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584ecc682ea10cbf9660202820033a0cc131524baae86da7bfea15e33d047fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-dotenv-safe-fornax-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ae400b0640ddf9fcf4390f177967e895d9cdcffce66837c6fa60cadd3106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-stop-chariklo-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144e30f14e66397a1b132474226e3be01e15f725b235ef6adce6f137588a7773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-jest-nodemon-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726bd6f462678ed62b14d8518574a76259ec9497d7eb5ddd9ff6de89b9f8dd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-vulcan-alphard-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca1e8b0aa7faadd1ea8a4ce8af230ea758e09ae252e3adbd033961f243ee51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141634 Malicious code in development-solis-cross-env-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2dcccf011de4fd5407fba424c68a7b956c9e40e3be6c84753b18110b9fc5f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-postgres-ariel-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52581d417bf9190a23944e8bbf136ab50f5700f8a2f7caf39cf0c15bc94043ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-chariklo-rimraf-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be16292185703b19d81d57d39d2566605a656affe85387e75dfe92b2e94e7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-quark-semantic-ui-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f502f2c1caa65093d90dda5233d40802fee836fb8ad50de5365505884689d64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...