Malicious code in nightwatch-figures-postcss-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-corvus-sirius-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fee67acece68dcfece32a0e3209034a208b1d4e721722fb1a87088b70c3792a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141905 Malicious code in electron-builder-hydra-mensa-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f1c84e1e35649320ac770b0244b8355e49429b646695a80cfddf7197fa907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142941 Malicious code in global-leda-xenon-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711449061c304954070a6e0690741a6de984afff904bc2f2fe9f6e481fce0a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-framework-izar-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0734ca78805b9c044c458383ecb8b4c15a2579a261b02200ff4d62a149964f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-jabbah-sails-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b31ae985f128fe19af9bee9ae4011ab98d52966a366502d7d9f65c3788a3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-webpack-karma-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a292850308a455a38f1dd6bcfcc0ff11ffa9c15f7cb817a8023b7dea243468ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-chromedriver-koa-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47f5de9836cd70c00ea3485794cb4fec4e708979736fa89733fbc1bd82ba97a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-typeorm-playwright-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0b45ccf4ee6bab76ad9bed53d6d091231fa0941b9b2c632ef2e7b1592e0fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-magellan-config-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1381d36d49061952c1f910630b1e1936b3bc590e02317d6cfb75526024ba2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-xo-ceres-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa7e2a9508eacc4043acfb139a17de0eaa316004f37d0113aea6b9de678ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-halley-hercules-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8fea094d24b08ba278de689ffd3f83c4c26bad5f1a106c99d860a488b9ae8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-octans-kastra-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb07606dd886e1bdb0d5bfcbbff59795c376489c1df9985da7c1ba407f7d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-passport-hyperion-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b1717d7f72fcec0841422679aabc0f3e49522afca70aa518e274c8d4479e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-version-build-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bba6079591827284cd67207a074de45cba5c746afc4d3cb6faac41206fdddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-koa-venus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ab8f90e8901da10b0e96c0a7884fb5d5c27e5bb8292bf8a333c83e5161a0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-hexo-subscription-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...