Malicious code in mutation-electron-ariel-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135b0d2df12e34290fead33825c7864872688cb11c7ae9ae435f360558c43e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-cross-env-exec-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94b7d7cab06bdad4b51a0677f1d821f7d50928c6d6eda557a6e75f8ad54714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-nodejs-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f42250a864c3381b5de4bc77cdc5b6f857514899573093b41f23d83b3c16278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-centaurus-yakutsk-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf37872579d57c7904980d46accf7a399584cfd1c2f943c8c74688895d68442d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-comet-mdx-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91345011c2e3f2e2353808a4c3cb3c3b00b13cdd534a1c0c4d88a87b9582e6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-promise-halley-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b3331f3df04f9d4fa81f092f7f8760911863b8f418932a348132a4e4fcf84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-mdx-csrf-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd48dce86c37a361649e24f14a11f5ae82095ea0c041fb843b7deb540d94869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-private-ophiuchus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3405904445531c7ae1d5711a260447cb6f598d121e2ca8ffcffe1a2aa7713f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-neptune-start-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e313b6f9d33429c95c9c1d346a82c5c092d01bd5405df768c5b3ce038bb232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-csv-jekyll-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f602ea5a4d3e70788dc52fbd3fcfd4afcd27d68f5d379ce7818d10fa011db3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-arcturus-callback-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890f7f9988476115c2e1293536fac082ba9be0e4d850efd3daaa4afa7d8bae28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-writable-centaurus-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0fb20b45393ae19d09faa8fd150736c08bd5b332a3a9fa59cbd20bc139c656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-venus-sails-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2233a552474c5eed5adf76810c6bdd4302fb6368b7098734f8aa7a3399da5506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-castor-commitizen-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d63d7d06b5a118a91516b5a41f47e4a941c8c4b433eab51718c01dda4b1f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-bellatrix-dorado-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03673651d02973a35847143bf4a13afa277c604a96ff85ddbe32da69d5d2dfd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139887 Malicious code in backend-foundation-prettier-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae1b2df0ed35268fefa4fe80a912ce0b5ffe7c7200b7706078f02c9930d888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144985 Malicious code in mini-css-extract-plugin-orbit-meissa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb93c8482597f34bab21322649a57417242e99b962b98baa32604bfe83455ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143471 Malicious code in hyperion-epimetheus-pavo-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b404989c9a1d427012806d7077db62f06671feb52518ff7466c725f691c6259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-magellan-elektra-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fab38db705f92cf1ac9bac0004d21420f5542fcc39d1aa5f483a4205d37624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-norma-test-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da79d86b866f3cc16959cbb6ce5270de1ace8196be287862f9fc39b06e0900dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...