Malicious code in chariklo-gulp-sync-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-titan-spica-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d4323dfe5c95c01f1b85cbb867e70a807bdfd1bf229b6f11b8e1feca94fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-promise-kronos-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532d9cdc455bc15e8e73766bcb878c564f0d199998e4ce16dad81a8fd1e399d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-aether-castor-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62aca217b44a643af9a5fa2ca7740f27cafaa83abe59fda3ae8724b08ed39f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-nconf-celeste-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dd2e527604d64e34551faa5600bd57cadd35c29ac58e7f998531cbc0c9072c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-terser-webpack-plugin-rigel-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138bf8a994a04b7e14d930629ec92d4475e294a85c119a59f15a9bf8ca6145a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-lint-kastra-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa350b2d4c3c265a386f4cd6b20c20ca0c9bee2e2e106102119c79f0b582dcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-capella-release-it-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d598619f1bafc4a144ea9b4ae5909cdb7e126952c9f3d57b5ecbc92654451586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-gridsome-init-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e117de56da81c5c34a98930ad169862d0bb5f3bee646ae6e54accefaaf814f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-bellatrix-husky-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2973f9118f939e46c373ee35b5c10d61a18a3c353d952bce4928a4ce858d4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-process-sqlite-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9273611d6fcd1c1d08fe8e868a72e5bb8227c46876500e01a1ec3d3839c7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-electron-algol-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefdcbff234b32eaa809ef06910becc75ac6bd245a7a811a8ceb9c68df4b7ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-sails-inquirer-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f749a1a37d1634292491cb74be61f5db279766a342da292ba9dd32fabf4394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-link-cz-conventional-changelog-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb351a808e39fe6ca52c7d529df120e541435ab8307449414163e7ee7d6bf623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-levels-babel-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e3036f605baee68a2b7ae5a594db1d71a83877342ddfc786b34586f7318a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-chalk-commitlint-config-angular-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab9e2517173fa6fcef963c83bc68703e62edc8fc55653176a6511b2269aaa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-chakra-ui-sass-loader-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb06093fde32832822f36661642b3ab387c58a1ce995ae5993df5d4f745159fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-less-fomalhaut-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3716a2e0de7505b106fd4744affb54a527a38051421df6fdb053b8c31cbfe374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141147 Malicious code in corvus-chariklo-jekyll-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f799fa6dba8ac85d2c88def2e925b5de88aa0a8c48f0919d22205c271bbd700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...