Malicious code in deimos-semantic-release-atlas-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d18dc8dcc795d30bc08edaf90ad56deb686efefb24e1006e8391463234d5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-semantic-release-umbriel-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e08dfaf5755158a631fad64ba2d043d77d0d37c5477fc005c7b66578499f9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-antares-yaml-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2158db6a93e45b802d98978535699fb91afd8047a20243a62aaf72204c09e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-morgan-mongodb-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784163d0e2a8265aa80028b5501e309ce377ceee5e7e44bb1fdc98e8985cfeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-dagda-google-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-altair-native-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-lyra-jovian-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc32ebc49eb4d0ea415043871829bf5692929f674c9417fe1b4e19bb5d15324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-schema-norma-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed297aea32ffff06bd657cb24540c11c48fdda93ec9e7a04d4f503346065c10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-less-loader-middleware-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae569a3671d9274588de48ed5de8d667d2f2d636d898cc6832f261b42ef93686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-vulcan-transport-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d41e24e945045beb52518b6e682a15231870631f15e6014c5b9d677f7b405d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-cypress-lacerta-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9760f23e4293d7c57730048e52da340abf6c34e4763dd063f1121ace07245cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-markdown-pdf-andromeda-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a929f851587f1d3c868fb0aec364a24cfc338af4c53ac9f28a5368f884487eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-configstore-blaze-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ef9581ec039be05c2e51e371aefded911bbf723162e1103e5cc9b7d919b95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-draco-local-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8794f6d1882edfc2e26a48be8a5192def801a638744e65a731076bd27bcb8882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-webdriver-mocha-koa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264d6148006e14acb388e5a9fa325a0f504bdb13ba6730af51dfd4004aabd832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148098 Malicious code in spawn-io-cosmiconfig-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e6b201351a9a51dd4418072852271e69f95ab27e86b442ea8598d9ae40f2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-xml-europa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeb2f166f38c0314f8044f01c7be8a2450007685583f33f3f7419257e11b3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-frontend-polaris-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98de682754ce3065d56369af1fab524ac4f432d751667af0eede0e70a94a05cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-grus-heka-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aabd30743192b5db4cf889cca1641cc79c387fa9213807598d2977d5bc2769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141347 Malicious code in csv-markdownlint-npm-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73e26256761af7533779186f15b847cda32f6523b5e531c46bdd00586275461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...