Malicious code in non-blocking-tailwindcss-virgo-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9edb149950bc1f8e57d253ad39963008d2ce31b5502a98f0012b06b0e1b765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-auth-run-script-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ea8d5247e207793334085e9414f90e48a345f11899bb3aecfda512eafca934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-phenomic-phoebe-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07cd1ff25e1d1dab0ec49a40130c27cf086276094946c1578b49eb29788edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-nextjs-jupiter-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1de40fab1d77b3995ee4b7c22866b53c55a021ce44aab33a3bff0ed6b29d6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-webpack-ganymede-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3c8839bc40bff2fc831eed2f2f16a2ede89e3ad0670e7e85bb2645c985847a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-miranda-mensa-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a8cf61132b136b96bfab4a1fa37e312363717bedabfccced7db087db1b0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-middleware-procyon-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2da90094f5a03de39c5fd357369364e0b32f35ff16c2eb61f23441b9e23f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-solis-fornax-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614d338c1f227a98f6e8b14c4ecab4ef110908f22f983d218d1b67e36623f855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-eslint-plugin-stream-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375e9010bc941f62a7a27223a5b5bf6a50bcbe8fc6791230809991387993d537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-jabbah-cross-env-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d06c65dd6879c5a5f056def2f439bf2bbf1c84c6df10a32dbdfebb777c6615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-websockets-dynamo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db1651cee518f3de25dc819fe2db60afd978bc23699dd5e3ec6371b5530357b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-heka-loglevel-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148630 Malicious code in tethys-polaris-sass-loader-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac4872e3209b7e770135a6ad29adbac00c7d4f90525555a0e3aeb4fb833a1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147292 Malicious code in request-despina-cors-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2babe9192364defa8cc0022c5e6f27b52416c1f9c28060f887e847f1cfd9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-farout-corvus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776aa8f7c9d309fe1c7adf4274314326d23bbc25bb64f2734590f54fd5bf25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-chromedriver-protractor-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a599648ac719897f63f6e24866d452e3982c60465ac1043e61f27fab45d85634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-build-norma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11f854a4c15692adeee2baff8f05d8ac9ad20ce7c7f5c2bbeaea5ed73bcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-grus-fomalhaut-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd88392d2ae94b49bc5758565080c4fbdd4026c05543b645b2d954d03994031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...