Malicious code in server-element-ui-aldebaran-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe35319a0e1502f611d4adf34672070439f01d604657bca8167ebf2b2aefa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-writable-nova-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290e7f70c796def7185fa4a8d664bd0af8daa14ffdcd7d1cb949db022ff374f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-sync-jovian-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6a723023ff0c85d131e2709f401499111bc5defade3c49268b9fbb808d47c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-lint-staged-janus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22eb79f93b9b093e3c75fd327caff60581f9359d9ae425e9c6666ca103cd538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-vega-jupiter-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64c3ff0fcaa999f368800299f9e3b6834bddc93d44ffefadbd20b354fdb971a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-octans-airbnb-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52c4b48266ddbc2d30e438b7ca57c0588832e7159519b162bf2f752252aa7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-pegasus-perseus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671af7da2ae010d3996821b6cebc6aeeebef5043d6a5c62b3fe0d51ba287aa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-miranda-rollup-plugin-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563f06ee953a2d8286e275886aa2cf90f60e513727cb95779a33a34b5023997d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-capella-nconf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dee520074e43f20c631e67eb9acfd0c743d02d0f0683e038630ae40bdb9b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-auriga-gulp-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b10127eb6bbd47a6636d78d2cd1db35c4ad4337006d511d902778ae0ca0b050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-draco-yaml-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac5d089952d08c761e5e2636c10cc88b9274023ce0ab0b45686985cb0d64c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-rocket-standard-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709cf7247b61cb50046c0d471edd39a3f667382a74aa4aa13b18ee742f99d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-despina-polaris-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cbd71e344e716b4aef88110b592244fcbefccd49ea5eb8adb76abbc469eb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-fornax-nuxtjs-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3541086eebbe70f6232c01542c1c747f33ef2d0a56945e336d6ea43c232df603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-duplex-meissa-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c2f5605f67397ee5dbe46e63f07211ac8cccf32c5834fb4218299cc9736f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-iota-mui-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fc2ced325bdb2030777324a99f250c38cbc9d416a4c685826d71101a55525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-postcss-hapi-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01be8cfa96e4044e64f8c668c0d1417368b0897ee88586a73bd7dd7c873c629d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139929 Malicious code in bellatrix-chai-deneb-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9fb6478dd3638f00e16753a5839c017c4696e62a8cb64c5dbf9b7518f59cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...