Malicious code in centauri-nconf-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd1c3839c4c52ac299aa6ff8a234c2c2d6ebd9a1e9f5d26360e271986f7d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-uninstall-mui-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0a4ab535415e7969122a4e850655975bffc86aac04bc53f23d054c1f9da397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-cygnus-scripts-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da0f3ed82a6802e1032006ffa7496f3444868266e937a6df6c74d62d391362d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-quasar-quantum-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9677d228e7eea18d47b9886132ba5dbca5bca647362142479585ef14b666d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-sedna-ariel-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61001b423af9afb8ea8b076b4c05b7e15374124cf3dbb5d8a90c58906b6b60a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-repository-algol-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f9a095a39a54298b2ecb6bc7b7d7c95b7ef74618537abcabf32c2fd88630c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-transport-aether-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a2f70e0ee9bfe40be60ec7cbc6f4db34b9d2c5881db0bcc8092bb165bfbfdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-sequelize-init-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97c59d35e035c1d1dae8c136d0747c24a153a8107271fafe2a54c93169f2310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-registry-quantum-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9a624219976b6e13e865c96a93d11d8d08d21673dba0b54237afda23db2590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-dione-server-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976eaa90b831e7ef63ca530ab6f33c384b31fd9790980dc34cbec5848ef7813d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-chai-markdownlint-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1912e8ee1140a45b455b6973df956f743b61af73151d2720f7ae6a4411afe89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-polaris-resolvers-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83cf514d7bef98542ee626677316d7a5026986b8fefbba0f83799577b78ac3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-gatsby-gravity-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ff803168b2fe3f1d2344f342c7f9d5a4fe781a3468e065bc15a5a06b0aeafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-uglify-js-version-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31193f251a950336823c83c49adcc35a2cc3615550b6484a164e03c4c24f51a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-testcafe-readable-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8ee62a61e56cdffe10f030dcf9491a98d3219334ff1c007935f2c37dad4045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-avior-algol-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491c6eeb64d88fa99801ecd5f9f5f6cf1cc329321265e75076dc0fea9cbbe404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-phoenix-testcafe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95d3d3e4b7723dff42ce077d004d0a8900e90aec20abdf5cf731d1785c3a26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145582 Malicious code in nodemon-less-gravity-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ba04f7fdaecd140dfc69f1313e561ea136c3ba12352ca7657e3bf0897080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142253 Malicious code in eslint-transform-terser-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf293f06ba8e34141c8b54aa5f1d3b141f1df1fccaf11b464aadbdd0e4fa940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...