Malicious code in nodejs-titan-thuban-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8539e22779886967de1cf80034d2581c2dec1fc51ee6b47274fac4b08eeb6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-writable-nova-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290e7f70c796def7185fa4a8d664bd0af8daa14ffdcd7d1cb949db022ff374f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146172 Malicious code in phoebe-prompts-hercules-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a51660212c8f8e17ba061c5d3c1287bece955ade4374abc8c6d27c3156ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140104 Malicious code in bootstrap-fornax-test-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6adf60ba9bef1c75805ea586f8259b5b5ddb53f5837ecb17beec187d724952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139524 Malicious code in apollo-quasar-hermes-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652e2d076c3ee69316f7b51ec59ecd9c44accaccb4af2c046cfab5c66c5133e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-sedna-gulp-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c770ec13334189a45aa0fef3674fecdd3a537588a7da860f88556aad8ab09dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-kronos-bootstrap-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a81b3ac18b5fbd08cbd211039271d5e92daac86cb75d3103fe9f2116ce1527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-charon-element-ui-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9faf39be3002ec216c07c9e7ca68ebb3371f6d58ef31de7ffe9ed15eb15cb823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-schema-link-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18593dd2817888bcd25d940235adad8818ee1bc9559a873cac93d9ff7cec227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-publish-farout-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5af19c1d6f08e7ef2fd2f4ffea93902babce362354f088e98f6484d66559a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-chai-indus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078962811ac003829123acb73f64404da664a345beaa595a158d60b963e27da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-query-mongoose-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5788a81fa1f290385db35fb12fe9885e283c9069d337479ea30915f15012fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-redis-comet-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497bc20d603aaea85b8f83df64e5c610dc51c3976e7be90479ea9df604aa6095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-cressida-antares-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e077222905d8156a630abb6c49f2ebdaa023e818242f76ceac1de7292a6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-puppeteer-winston-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-ini-xo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc70c450a64a22896397ed0c5c435ee915be7a5a41639f799b2c2c55782609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-umbra-achernar-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfccc064fd329dd2cdac358fcc4e424a92bc45e143066d8dd5c6ff834c8a6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-protractor-wasat-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9511c4eeecf15d09a5994d24a1e38e1d7eade75e224307dcfbffc121fc6777f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142280 Malicious code in europa-mira-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c23a78a815cdcdc0f318e8ec01bf642638a7543a0d29202b96f07209df1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...