Malicious code in cordelia-kastra-mui-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9153be71dd128015064d23635b4510d601f804fe1986f5a7a8af04062f75c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-nightmare-npm-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774a47fdb518927067c69933219ba0bfd8dbf5fb177ea54f167901861846ee65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-hexo-nestjs-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52307fbec88a4359738f1a4633c61900298bd8f2ce42dfa1b7e7cfc137ada7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-phoebe-yildun-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73982bcdeebf085907110b52f7125d6b6f8be6363befafffd44ffd4a6dcbc7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-halley-xenos-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7beeb5e383e42e7d5efb000bf3232eb603b9723607e5c6c70f404887527ec983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-wasat-miranda-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d06b6051c120ca10f5da401219d022703a9a252a321396da1352869368eacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-indus-wasat-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f05a1808f8706ac243238666ec94a2d41548943a8cb519f9bf6475a331efbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-chakra-ui-release-it-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b02906e9dec6236ba4177faf7870709eab530f6e8617c44e7a1a2b31716e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-yaml-mongodb-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e80b370234a89e5ce2fe90376d18afeb01402b685d4abaabdea8be5893c4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-apex-ursa-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db345a3df99f8640bcf7211fc77cc9d6d6a65310f8165ea42480bd60fdd7f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-winston-less-loader-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693f28f8bd18b96b7dfb6dc284c2aa7df716c48b276888bd6a294330f285276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-event-meteor-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5466457e913232044e97ffd8f47292ac4c038ca9675f86cf57212134a556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-chai-indus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078962811ac003829123acb73f64404da664a345beaa595a158d60b963e27da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-envconfig-halley-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c894f1e7863b906615894f2b713cdd911bd1d750fbc974f24b4727c592cd80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-less-fomalhaut-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3716a2e0de7505b106fd4744affb54a527a38051421df6fdb053b8c31cbfe374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143231 Malicious code in helios-event-carpo-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4ef0a390f4f22deb490f66721884877ad3efa3d335bb7d3ad8dbf168f43ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143245 Malicious code in helmet-blaze-eridanus-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23f280c4969fd442a925326b4a70a71af391c3ca923f2f2784d2aeaec842b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...