Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-mocha-colors-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d2e4560974c6e97509a5cc24fa70ae6c81ca4d820ffda5d7c4ca31d2a52876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-andromeda-xanthus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a4bd8d58e794be3d15039990dda69c9d3e45aa26ebd1e2ba5afeffaa379e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-lyra-solis-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93918839bfb75a9a119aa6c35c5cdf81d305773332ba2da44822c50953cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148523 Malicious code in terser-inquirer-cosmos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfef7f7c8454e3b64c77d4dba42ea2eb707e9fa4bda5a8195869d917e667fbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140677 Malicious code in changelog-pino-pretty-webpack-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d6638b975900b50323b6e5574a6f9015943249473e10e8dd1479c4597b329c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145018 Malicious code in miranda-adonis-uglify-js-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5cb08f98cfd9f561dfa229fd37bd0e78a5cbe13e7531b6678bb6e10115ba76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141929 Malicious code in electron-rigel-bootstrap-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bc5104c5c7e429d0d8c1f83f94dc9e0d96b43745df34a274ff9d81becdd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147596 Malicious code in sagitta-express-reveal-md-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec668e95fec75e52b44abe1d7cdc557d71c98e8c073a395a85f274895955b865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-registry-proxima-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec56fe69eb0221d54ba68935b5267e8c0878e966365c32ddee036056e961c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-library-cors-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa1eb5e8c227964d009dee2eefb0f42f87b23ce32debaff53c017f95232a8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-cassini-apollo-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80554e528c2a2f596f1e60989a7b44f1288d8ee48a9cbc1fb9477c1c18324a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-ini-spectron-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b6b0a4b0fdd2e3265a8bbf727271ebccce0211e139ed87d81e9d6beb63ca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-gatsby-lint-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8459462649e24ea2121d663714ea09a44764f3c854c3983972a63b558327cefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-spawn-parcel-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b13194c1a937286d13ed6323189dfcfd26827e4122a40aae37f513b84c0a9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144358 Malicious code in levels-npm-yaml-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa37b47332dae889eb886aef463cd255b9f8cdd61f08346e076667848f360354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149196 Malicious code in vuepress-miranda-restart-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bff913ba9557155fdba91e2de8f7c7272ae33b7af485e13141411e5ad745346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147426 Malicious code in reveal-md-transform-miranda-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2df64fdb9101c4aa9e9f2408cfce30f0f23aa22ed2e41e82bbb0d83a66863e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...