Malicious code in bootstrap-comet-convict-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1090d16dc37057a5852adbfd5f493146d23a9dde058a92e0f5e68cf23ffbe844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-cache-cross-env-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f84b23994bc74cbce26b47d6fa618ed69bc1cd0ffc0ca0702cdd19eb02cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147981 Malicious code in sirius-transport-barnard-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f16b41c916fd05bc457611fe0cddd995304c32516ab4e4973479b1f96166143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-auth0-style-loader-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63113711f441b7dfc1f3e59d618a2408c9b5ac7a3aa57122ecdcb81c93c39353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-spawn-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-rigel-webdriver-manager-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bdc0dfd44e9ef24f1f26a65a9dde8fe116137932c6a13652c8544024480f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-mutation-stop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef0f78ec274cc166f0d04c5d2e49ce4ced44fb49664709ba53e0ff780fbd8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-gatsby-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8d6e129f1fb2b77342ec6add65d3ccbf071b23d65893e28f8b00c0c398047b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-ganymede-leda-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba82946028f26ae50bed848a88471cb5a5be888135ced1523e3e5774ad9f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-firebase-remark-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2bd0fdd87661ce67e74c146f4b7b9cc662fd907f84c6906e86d075e198c677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-sqlite-optimize-css-assets-webpack-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f47bf8ca44829b955256489fcd77e29d2cd510ffd966ac29bba07b109ce826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-neptune-public-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe4928a1a9940219865f50a24366f38c974d857bff1aed36844629daf22054f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-pegasus-convict-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9efd04657104cfac73c4bf700c254831335ec418854cb990760a41449745b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-docusaurus-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee67c97a3529471781f0204f2dfbe128842c724b789c58e825c918fae1e87e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-subscription-vuepress-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33217d1af956169d2508fc5394110c19795450f5fee3645a7f354e8e8a24972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-eslint-markdown-pdf-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5edddf5489e959e628e53fc66c2bd0cffb613bbbcba0037d36286e701a0450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-odin-yildun-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93fc9caed39a985ca16d0832f3a06d17ba8a9921edbc0485d93b77f665db149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-google-prompts-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e3cebc126d02237fd746fc3461146e32650856c04c1abdad20a0015402fb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...