Malicious code in pino-cypress-nova-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4314605ac8a292040082df3767736ead396067f88d0193a18f4a19f922f5119f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145095 Malicious code in mocha-typeorm-regulus-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb72c95947fa7d58b028dd38afff0fb452892ec02153990107a8ef8ebcb201d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-nova-thuban-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99b7389696fc93347916f07e6163ef400c2702bbc43e8fcb450d678c3660936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-eridanus-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf8e91c6a667fe241fd67d4152b461ba2a0c007607acea3a94c86dcbddc4247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-async-meissa-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873b499bb8e3a912398350cdd8e55638214ddd9feea30efe08c7940413b2bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-npm-nova-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c5f0fef0802f17d6acba2e736999a4bbcaa1d25cac8d3897d67847a0380ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-despina-terser-webpack-plugin-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a9e70bfe7e9a27e65d6e249c139e61ded84d1402bfe4ba2ea4159d2615e06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-publish-markdown-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c37dc5bc5d8fcb554dbf6f064affdc92e9b34a5aeca6ceebbeee20d52be0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-websockets-bellatrix-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07b72c3f5eb73e5033d0289424e9a6446f69a95e66a24abcc4276a7233776a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-farout-nightwatch-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3ce96e3b741714e24b907bf10a467fdea25a56b6283e5557181041c9c11b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-pyxis-browserify-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570287166fcb791ea4017fecd25e850fdc1cd20d3560c668487e56d642a49b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-antares-command-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b92538efc5003fd39ea6c07c4688b0790c70dbc5345a0b1bfbaa470acab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-restart-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c669fccaa341ec62ffab852152064911a73868724f75a4af37737a8830674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-playwright-mui-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3008a23f4cfdb2580eeb64864c68b8e25c16b631c7028a73cb15f99eac3e0852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-bunyan-ophiuchus-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920091b85ec0f23f09f795c08c82cf697fa78950a8f13bb33dc691002b7e63c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-global-promise-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c94e7b9cf8e7ef681f2d8b9d20af61cfbb0ab1bd542dbba0f84d592e384c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-mocha-atlas-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd2746d873666f4365b41ed0fc9271d71a3480d6f86e815799cf9954bfa49b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144317 Malicious code in less-loader-cross-env-nebula-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025b35fb83b50288be5f6c7f07f992e963b337094085def0b5a13b58ea2631f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140511 Malicious code in celeste-juno-restart-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...