Malicious code in tool-aquarius-juno-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ae16d041898022924aabc7f30463dde9cf9a13dd7d8407aef91c9a7cdf7be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-radiant-buffer-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2b0e8909e37ffb7611e51a5a0d1e31f10eaffec7ffa942ce0774a9d78860af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149536 Malicious code in winston-yildun-less-loader-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69a769cca21c2b2a2a822e2da066c9daed6de27648e615f57d6c614b2376b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140326 Malicious code in callisto-cli-galaxy-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf556bcb08436ef6833d0ed35cb9b7b1780cbd5bea5d5949a951f74bd975cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144717 Malicious code in markdown-warp-gridsome-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91a7f62068f0a585e503506bf772da51aee6b14209f21c8d75739764856b854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-npm-jwt-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09136761d6da122525a069f277501a34c59bd81659e1a421f38a2c0fb946a205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-jupiter-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6c34d8ac0eb601de5dbe1d8ffd3e9486188b296e4dabf08a27344637a8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-arcturus-postgres-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328014f3eea8432fccfec2d92b8ea016e420ef7d3d74b9c0b304d13eabee4d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-cordelia-quito-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f3e8c12a5e507af7ff89897aca212fa0d62f72bbefe7c7107241f0d4f3606f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-elektra-quantum-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a00342994850ce03c837378e8eda96dd6f80397b14d78a04906aa43710f198b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-pegasus-restart-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7009905cb8f53560de954853c4d20a219c322493bc7f7bc00c89373ad493a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-bootes-dependencies-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47714b8324929c7ccc1c8f04907ac525d8457224ff36b522c46d41fee2d5849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-proxima-semantic-ui-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653895f8925b05c1c5a5f3796d814966f8c2eee89351d88d6f07bf2bcdbdb890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-zenith-proxima-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d16309eec2c4b68c617d8e3add8ee19c0b69ec68801ac360a1206f5773a74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-neptune-dione-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0c1d2d632485105b695892cfdf331ec228fa9c0c4b44667c6207987bd0b91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-babel-ceres-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28d45d234dcd5dce8347016dad2d69193815a03f58182ce50419b00a8c02ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...