Malicious code in sadr-query-phoenix-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920c6984fb239672b94fc29d9b92cf39958ef99654a15f50fd99e57f70399a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-oauth-fork-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc0a76c49b1d70b7ecaa8be3efcd35bff4e3da8c178acfd5c0d01ea58834e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-solis-hydra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e4c944e5588742767a5571cfc83804f233a9273e1e095b54ca7a84a00cae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-nightmare-sequelize-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4033e737930db4590403436f3a88cf32ddbe9c9595679fd09ecad8b2346f17aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-triton-canopus-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a42074780f1f87ff450718d0cc457d9f648d07232d8b109f0e0217dc471b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-cluster-duplex-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf68f6b5a3c1515ddb9baf8daf27c3cab617523afea0af8495b163e358be257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-meissa-config-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bf6f8a6ac69fb91ea2deb9bae6b5c130a16569a091709ebaa8a834a03f251b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-corvus-atlas-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea6397626f678ed2718693c793e7e8c9d14c88e40df83e6f5158ac589f021b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-readable-react-bootstrap-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e775b6d0ca701f5683b2d7e970cdfefc9a9d539920c94864c59683252009ab1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-gulp-leda-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d2c7bb8aac395496ed655e8f59fd436542ab51bc56111fda94804abeaa8ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-ursa-csrf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff09a0e2775c3f104292df18673f57ff3a4052c29debe9466012a0994d4cbbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-geckodriver-semantic-release-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b096f34af96116c9ba91362998d60d98f970aa8635a96fa3e11e0dc8384ec2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-superagent-electron-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9f9a3a3caa59049096a63d8e9f999c94003ff7ff78fdf91fc11d71097a025f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-chalk-csrf-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0aba9b08ce2f5a603c22c08ef31c975f98a0baaed6e08c137c3888d64fac1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144927 Malicious code in meteor-quark-scorpius-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43670b3cbb53c22e277552f1fa7674fd03d35cfb9fa471468f07fdd90c2e92d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145041 Malicious code in miranda-less-mensa-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc4e4c231f13e5fecc93bd7ea1c4f26d7f4e00913d6f3b2104cb008a253169e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149080 Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...