Malicious code in leda-grus-bellatrix-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2a51ebbb849846453bc0fd4d1586326a1133e7270c457e0aa383d38414111b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-luna-sadr-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16462d0ef7a890863b7fa94c464a2b54c651b156d14de9f454999771ad47d84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139292 Malicious code in algol-chai-babel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d9f8282d541ec1f5afb3ae6868da6de795ba3b4d3ccfcd7ded668aa567b1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-lyra-solis-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93918839bfb75a9a119aa6c35c5cdf81d305773332ba2da44822c50953cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-spawn-parcel-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b13194c1a937286d13ed6323189dfcfd26827e4122a40aae37f513b84c0a9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-europa-cluster-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a563a155a4fcc5190b127922618b5c189c218e5ce7e7be368f7fee7d1668e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-loopback-uninstall-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e158529ae4b1d9cd15ea986ffb47caae4298f787e4f49028d11d8a46692983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-xanthus-hyperion-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac70bc9cde391c15423db0a199454ca7b61c14d507348fee8fa1dc88cab3f789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-ini-spectron-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b6b0a4b0fdd2e3265a8bbf727271ebccce0211e139ed87d81e9d6beb63ca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mini-css-extract-plugin-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24286624def132ef9c376a35c74006cabf3598f7c1a32d194a5a9b4fdd37621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-yildun-rocket-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4d699a320a81ca1190a4392d025f16901a34bc4c57d0e8a0a86c5e26aa1a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-andromeda-xanthus-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a4bd8d58e794be3d15039990dda69c9d3e45aa26ebd1e2ba5afeffaa379e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-readable-quantum-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d8a82e61512f1a6df2bf946c62cb03f61f7c4af249332fcdbef2b6f9f19af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-callback-miranda-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cd4f765265e09e0202f01e90d9d9707e3c457a83a0d8e45c3fd3ee2443f5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-webdriver-manager-colors-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7046db12c93f852d9af106f281fac38327ff8b7cf8e3aa505fcd91ccefda5b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140489 Malicious code in castor-nashira-grunt-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147426 Malicious code in reveal-md-transform-miranda-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2df64fdb9101c4aa9e9f2408cfce30f0f23aa22ed2e41e82bbb0d83a66863e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...