Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-terser-mongoose-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e082163d5827b000c5b136c6eb51be24e66954f12fd324992aae6f786120cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-bunyan-cache-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a502d3f6c16de1d61c3f028f38278214faff3d2fb4db6a0eb034fd5efbace5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-bulma-tethys-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8e67c18daeeacbb5f975e2833c77be01cc75cd8706f8f443d850d65db26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-restart-apex-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ca1a2d5bad494316f0cc17e801ed97854d99839169829e82bf8c34b2c70be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-changelog-webdriverio-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0e59c7d74bb68f1c08f1fee54f8e1295b7afd6445c1ba26ecea6f7b75a3365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-less-lint-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-vuetify-remark-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4ab0c7dabed0380a75ca522101b625021814c0673af71c00022ebe48e46658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-cordelia-remark-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78d69895638b3256becdf9e96956dde010d6df9f3b7e9db4f285cc7873ba6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-html-webpack-plugin-izar-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5b12b6bff5a1d345f252be0db66d506247fc87ad6a553fc02b7a9aa498a52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-airbnb-pino-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41bcb691b34ac087839ae6fbecee64c8eb6f8039658ce929656436fa9030fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-terser-rimraf-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85c5ae642215aab8b0b119876bbc8656b8061b80381484e9e2b94aa377a65f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-sirius-commitlint-config-angular-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94b1695d5b304a35a7ac1f92bbf975775c82eb0b155fe45deb329e1b903b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-slides-leda-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05fa4e5b5360c657a9ad23075e841841743c8b552df1366a80627b9d5694592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-comet-orbit-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bed052f835a132acb6491032b7a18c1036da21b1b9eab884258bd3b3c53175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-yildun-corvus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71389884d84d46c7588e1f5e417d4d265853fc74c19a59cbe8fe39fb0d0c3d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144001 Malicious code in jsonp-miranda-carina-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb65ee6b290dfabb20f89f3792d112be79a24a474b795934b0a4e2874830057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145610 Malicious code in non-blocking-hapi-less-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075caf1674ff7e833f0bceb57dab4fd4abd685e881659c5f95b4ac57f926a0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149767 Malicious code in yakutsk-electron-request-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e539cb02c91ae228f455572ac5991dd7b11d2b868b70f0070586ea8fd26a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149217 Malicious code in vuetify-node-config-cressida-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293161802f07c9de6661d6fe9613860acf582af0194c832439c21fcdf8700510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...