Malicious code in telesto-eslint-config-writable-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25b3952db8fa305c0c824b0b07cbcb4a584f3bdf7b0be9278b4618292ff99a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-webdriver-manager-eslint-plugin-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d08eab0498ea6d4742fd2273a6ca42ba843338b52356b14b91e8ff07b822c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-polaris-oberon-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188ff9e547ea0ecb40f0ea8761f723c0a4684267863535030583b7c5858e241a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-concurrently-fomalhaut-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f42ebaa574e7ee90b1b6d3611a83350c54b9886394a7d37a7ad315af7a0d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-phoebe-octans-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f9f502b1d59b7d8c24fb7e93794207cda5d02230b9215234bcf41b07283d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-postcss-aether-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308618ba8dcb36578482b63edb7c72de0fe2074c46c37291ecd1d3cd25da9281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-materialize-mini-css-extract-plugin-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd756c9249743cd040cd2ea865ff064a8e93249f95f6c5a86941b003c255727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-prompts-winston-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8d9301673d88daa55f7e71755ffdfb1c684e84fb6bdca24e668e65b18272ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-webdriver-manager-janus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2072b7f7d97d018bb81937d795787be55aa88a84a1a29ad9d1fbb5e10a38a4af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142036 Malicious code in enceladus-rocket-centaurus-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b061d89952991a916b5ff83172655de80a4aaa23923da6edc33be57cc4669296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139956 Malicious code in bellatrix-rest-blitz-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d051a410ec4e152e8429393d4f69c4e39cb62b3f53704d5f7a54d4a087b454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-xo-eridanus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb820e1534cb90c0d94a2ead0284f4c60efdbb87ab1d40999e2915c495e6557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-sequelize-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996a8a8a5d674102c7d58d84406b55a149e636642c28b0aed62ec8ad7a5b5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-superagent-foundation-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9a41fdccf8d8485cd2d9eeaef4dc462c6259be7925a84e14967be163e5b997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-grunt-umbra-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267a2e9b1039dd9ab3920b5fb7f04b7fdcf6aa26b2ed85a9869cb6966293b4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-neptune-rate-limiter-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb0f24eab897236a8f82e3344699506bb8f68e405e72048c7db8a045739259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-xenos-sadr-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8462fcddb73bf27d7bcabb1adc1a6ab4a89bb78f09ca7930c977f334739514f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-zenobia-javascript-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2442a2f792bd52751317c2d99d2e451ae980812d3b156f2d4e8ed8ac4e3897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-callback-algol-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1538e4a9f30831e667538f037c38b18a94ec4a408eba6eb228a4f975a9b8613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...