Malicious code in karma-hermes-supervisor-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ed3ef202182c8794d3913afa6b9880d212ad731b141c6a92437e1e35b1f213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-tethys-epimetheus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3796b6e0948a85433990e0bdf3e3701014a6a6b5ef4f750248adba4e27d670c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145187 Malicious code in morgan-release-it-umbriel-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3a7442fa158b3448186041804b991a98c63c2e060a0da1051863fc9ef2f804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bccbd45c710b8f6f1f3255a43b78cd7e70beb6efb60b17e950621c6b86d8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-xo-jekyll-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76602650ce2e54b45d8b369d4cbfb502416f052b5cb52458648461f6b35802db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-xanthus-apollo-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab9a3fbabea8e9eda0274a512f0c48eb29716a7e17bb3f5383dbf3e01f197ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-odin-castor-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e305501ec1d001acbb239d5dd7c8b27592441584f5b792582fb454d30a2db986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-hapi-solis-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674bde158ddefba91c9d567868a8757a09867e88fbb79e9ec1e442218ce0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-grunt-async-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1620c42d6b9a3626d387266ad5905f22353fd99815e09bc9822177cf2e95d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-run-script-ophiuchus-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241691cf5bdd46c9383783776eb754470cc879fa8b4b29a106fb767123215e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-levels-dynamo-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34eb6c2d7eaad1d86a310460fc8bc8e60b854ba68dd743d3aa841abdb5f56bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520d0a4a8fead49be08d7a48aa69a9c1ca93479e5758acbfae5f2819a1c65ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-gatsby-zenobia-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4539e20771a5e14a396382185985a89fdd823182f16cf3fe399f24140d7e8c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-atlas-betelgeuse-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6a66f49bd2c098c51d6b64c9f1b8c603aeebf941927a905ed3e84b7efb3e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-stream-gatsby-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e216325b4b34cca8a11dcd83aee17320f03b7eb519a8ad76464a962b165b5e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-chakra-ui-phenomic-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-winston-janus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fa490b9c442ed1f763545052dcf9ce8a51b65c8331ca58d552ddb81ba2f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-run-script-nashira-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...