Malicious code in restart-event-achernar-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac912a9e6563acba040b90c2a303533a4de514b4fe057f48522d0bcdea9bca1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-bellatrix-telesto-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570a20400e7cb04c854f91844d4ac87547c947929f34a5fe71b52210e83d2789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-lyra-iota-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14a65634f2c9482704751a1262d96626592d9ab3dcef6f375979e96c07ce110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-betelgeuse-zenith-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a08b8d9f256af66e0829d46984add840408b56494c471b1c80839bea17a9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-cors-bulma-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe1fa01ee2f04af77ce20ebd02184ddf94ed2d21d9d64f82efe3f412236a439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-commitizen-koa-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9be3e0b6abd33eb7a29bfccc6faa0d3513fe2ed7adcb7007ae82d65c971681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-concurrently-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2cfe0c3e58ae6358bb280c4b65e3b0a5ad1a578037814733f4f7581aa92c89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-phoenix-antares-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956a174c13c0490bf7e9a7ef5873ebdf96a8566deabda32f029f8357f56acc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-europa-bellatrix-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2dc13883e16aec9a6ab1832ce255e0fd16cb43a6a61cec25ce2388c426afcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-virgo-library-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a584237b56eb540fa7a336cb2e55a1a35745b2e69f5dbaf4ea5b1ee12221ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-pegasus-aurora-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830dd1c9364fc3f1966153598abe3ec32aa54e255501d269bd4e06e5d34cae83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-nashira-pulsar-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34b2df3d4a4995a17928a35dfc555917a0dc66c1262a3ba9686778acca2a992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148011 Malicious code in slidev-nightwatch-uninstall-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80829097b2716b4af04bc74ad7affacacf4db819ea009dfc6f652948ba2ad69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140691 Malicious code in chariklo-avior-corvus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d479fb7ca74832c2b78a20baa9d8e3c6bde1afd6816d629f5ea11d482c9805e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149022 Malicious code in upgrade-neptune-arcturus-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446e51fa447d1487822c19c02f2760b8f64761c7809b2671ffe92a6b1047b144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145241 Malicious code in mysql-comet-alphard-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a005d0955df6e4e93cf6262bb033d9c63b11a8dc4ea15c3d2b0c59d7f6791f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145059 Malicious code in miranda-stream-node-config-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10f00153d17388eda7368ddb1063159fba592d0095acd6f9565936c4911657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145373 Malicious code in neptune-phoebe-octans-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f9f502b1d59b7d8c24fb7e93794207cda5d02230b9215234bcf41b07283d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147874 Malicious code in sequelize-neptune-await-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc82087e1ae03780085eb9f9224d3323f0d27a4b7a3782ee393c109ab082532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141869 Malicious code in elara-centauri-ini-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f1ab2a055433d5ee1d938079bf058d314bb9f51c2e41c1167b8fe11d06fdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...