Malicious code in atlas-transform-taurus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0909ba4909733d4fac4e56663f46711f68ddc92b68de6f9e53ac2818f36279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145332 Malicious code in nconf-ultra-phoenix-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23544b478756bcc91654d2d0acd95386311f1aee22d1468ec6edb87ab4e4412b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139595 Malicious code in ariel-postgres-ariel-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52581d417bf9190a23944e8bbf136ab50f5700f8a2f7caf39cf0c15bc94043ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-exec-event-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441716421f5d5b913842f86b85b33d31d07b792fe47e55353a179bfa02342063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-webdriver-mocha-apex-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe798d5eddf4142a4c6e214c64296966c3cd3c6b53dee277bbafd5cdf8c77cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-release-it-betelgeuse-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8df59cc076ff9c49da6ac43f3320f5cb7a81a307812ce3527b092acaf0a9fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-rest-slides-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000bc6d60c2e882024d14774757d45f887e1685e183159005595d91a44a2f2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-hercules-auth0-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0a8d0cd21f821220e7b075d93263b825737c0f630c3efd8dc80a94ba767298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-atlas-figures-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5adb748096ba778ee5999d50c614c52e7e276480ebb02aa4b345857a837b99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-pavo-arcturus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb3646c653052b4f7657c65572c429be051821f24a9fb82a8bc96c3fff2cd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-mensa-tool-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b711e55d7e247b8426e9450555e8fd0d78164118f6e17df135b162418d22abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-europa-install-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c34f5b580e515d57b2f97959e41b59126793c501180fdc1ce97b11c5f06699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-acamar-publish-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b96ad5ee90376a01e0b366643303c92ebbfce04bf0dd3baaf1e33fb450d196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-elara-ora-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2429416003a98f5ff4a3134836901c63b440a91cd3ac932abbeb75e3bd0536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-grus-csv-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23074145049a720e304aacae238b9e6e91e6e85a207ebbd06a7a074a4f7fa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-restart-ophiuchus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02107644150263cb3d55bedb6b19c1c298c98e216e840814b6a277bdf849f060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-development-jovian-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51464621a81af6bcff023d345004235362af76b61b06c3f4b8d0b27d4975dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-europa-luna-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ec9c4de6332495849e84ee2607954ca1bfb4d700c68a98d29db31409ed2670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-antares-quito-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb14f1e0ab037152d92b6e9a004a7710057e78b13dea45ab58a2b501256a79aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-halley-comet-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61971e696f00e0b15ae7dbd87ae429aed772439dfcd64995928df915731a459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...