Malicious code in exec-firebase-iota-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94332727a2aa8c02e041f58ca774af62ff4e6988d385e78bdc86956bf5f7f31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-metalsmith-vulcan-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bb66a7b11e61ba0ffe2e0d0c433ef34fa0d555fc5381ee4c86e3f70147a06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-local-eslint-config-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b8a0e9039e0451fe1b3b0c8b6f33d25e4987340fefcd91e843027f99b848fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-antares-eslint-plugin-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8a5b6972240c48c0b37ed1252dc6990aa4763cca8a5cd7f23c5ae0bd9c56ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-chai-library-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d8d2a8feb73313d210d8df9cd9f9e816a0083679c59fdba4f8a9e7ff1c1018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-csv-galaxy-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd45e16c796e796ce2867f6edaf3c1ecb8afd063eb8315db7cf688fcfe950107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-zephyr-public-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc49c0e5e70b2b1843f86a8aae0bdc87d16c02b994ab5f99a59ab51c8e9cc016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-pino-pretty-start-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7227feb91a808715799e857158fe7571b0a692dc72fd0f919c3b346390daddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-mdx-eclipse-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a747424ae8e5b12c9bcae09e5d8848665d283990b419b4387e97311c63169be1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-xenos-got-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262eb227d33e53762a9bdaf1b929da6e755daf1cc149ce09ba24785fb8e7934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-scripts-aurora-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c2116a7fd36b06664e2ff05d077433bce5510c5ca44040ecff506953e10843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-sirius-redis-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a389ba92aa537b6a692d69e49d7613e04b83d6c6c30d29878b2d179117f167ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaphahitt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840340691e856361c102c6717e363d16110ab650b76361f68d7ed9a921403cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-cordelia-ignite-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191f77137175533bdac0d7f62ee240d294f070f0fe423479516c0edf01b5fcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-transport-slides-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d20830d42f30118a721980156a6c5df9fff391053a583d5d02399e0638132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-eleventy-mongoose-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10753c0a882ae2b325348efd7816467b316be6e149fbcef89fbd7ef2ee98699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142156 Malicious code in eridanus-superagent-enif-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f582d1fcc8b43d9206c0d7ff651f4fd9297da9b6c8bfcd5c44adbf762e6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...