Malicious code in async-vega-jupiter-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64c3ff0fcaa999f368800299f9e3b6834bddc93d44ffefadbd20b354fdb971a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-figures-hermes-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9160571acd445ede104e9082198649120814b8cf3875b30da59319d2e46739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-build-readable-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03e847818678280e92c3c6e82daa26f0b7e22d0fe3afb9b4d2a96f20cb04908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-gravity-jasmine-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228f87b36c2904f348256f3417d1250c227305fbac8fe4a7e906258214771d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-zenobia-sirius-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f5376b0c0e0a0ff01dd8e01c3bab10543dba3f4dce47a2a2aa1524795a648b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-hydra-algol-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c996b6ede00885261ac17e95a57478bc731d36b5ac17d25dfb729c5d90785b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-run-script-weywot-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b1e32708e609247ff12298f129e107d30ebeafe72b630f4eb6775ce62f1a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-canopus-kinetic-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d539cc7eb5c8f4faa4c7935908582514a5cabc02edcf4ca728eabe1cba80e500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144691 Malicious code in markdown-pdf-frontend-rimraf-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81956f1b9dd174b55f6d0b1296d2a4ae9ca30a4a82a3c848a5a3a4d3c331e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-pavo-lyra-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da28957920f07798c64c5a38ab1c1290b06db95caf3906aed69d60c3458f329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-fetch-event-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1ce1e12bcc903510a892579c99f0def360b8da6d761f716adfb0b174868f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-electron-spinner-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56d05f3932064f0cda377159594ea43d8665348be67a33b6f5030702c017cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-hexo-scripts-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cd4034114950b9d64e45cc0f7a96460d48a9a2ff00a3a936f8b24362857b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-prettier-bootes-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f089ecaec9cbb1bd421a44425822953bfd771c24aa342a33a0267b27dbd3e2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-terser-webpack-plugin-achernar-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1e454a3b4f4d5c66dba0bfc9697d1034ffa85bf2cdc3a171bffaa936b9ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-webpack-yonder-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ed8275baea7f1fa8830efb7a7a6652ba556aff243edd736d5527d88d1e5b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-prettier-stylelint-sync-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d5c98db5b7146df7a441581fdd939b2117265622711d8ed278484b18dc0319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-arcturus-charon-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08baccd9d82c30e5e6c477d773783cfbd6d66f0cf6dca7d0451eda1e7cb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...