Malicious code in miranda-native-cross-env-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98691086a9cd5b5817eb65f3e3379f8ecc8cd6c0265c8261ec01e76d2f7d4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-oberon-lint-staged-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fbe5fbc07c10352f1d16b4b7e9d07886575f92405b0512a75a06a0655b6367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-titan-babel-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01730205c12d694b2acae4ea9b3af03584b9f34e2f92fab62e45846ac5136fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-vuepress-sails-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8174eba67733225bc2a363540d7f5712c22849add86bbb13c447eb8e2266a409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-polaris-terraforming-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff57b3d746be81aa8058b5f693a6d9942341db5f639aafa79ac47627b36a01ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-commitizen-server-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5520a0221162a9daff8f9fc7fd1859cb9e5017d1fa3d3de33024e017fc173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-magellan-magnetosphere-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fee2dc3ceeab278bb8c4c5fa3312ad51340599245bcdf8b5de8eeb28e8d9bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-entanglement-firebase-multiverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aec89289aeb2a352ab42fd6e356c59312966fd6c9104b331eefb6c970f7fc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-sedna-entanglement-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8de26676b02acc15c835b2db1cbc166b1c3da77c3fe9955268f44283710cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-blitz-kardashevscale-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4011abbf08341d1fb7ee6940821bb4f174b5d2cbc04bc0d2b44148c74c88e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-chalk-build-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12304bce2d2adca285ac9ea833f6164df53f2794ac72a2e3661ee2b7f9968c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-sqlite-neptunology-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58da81d5fc794323ca39eade6fac2190d7362bfc3ea12fdbbd7e7a487f50081b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-compress-phi-bash-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4452d7b0255f5bfde9306684c29b815108b9f682b2d753820f2f60cabf2806da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-halley-algol-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ed0d72aa17ef547016ffb572562b5c34e11e0379d30a6ddc9cdd64cc716793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-cron-object-chi-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c60002ac5653229eb6215aa13f4ec5c490f97c72faf60b5a0be727c9092c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-alert-hash-catch-index (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85fc5860c00474af9c73797df5baec4c6920cae1896fe84f084c86f57a23547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-prosthetics-stream-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8349dbfa155f2d339ef3fd2ea67bde24011b09acb828ba410014298d1394d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188248 Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1485cd468c12725160c4f7c52c2420c78dc535b92bfbb49bcba56bb7a7952f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189114 Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf33e7a660e7f12a243bf4ae70b1401a0f4b66ec86a8c2aa5e877f46d3750826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187718 Malicious code in lacerta-ceres-jwt-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9ef158e3d8954448aae52a5a567e27d1ce378b34dfd354ba3f163720c80229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...