Malicious code in dactyl-inquirer-version-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8252b1269cc558b534e0319a0675c490082867e8a797591156fe834d3f1d7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-transport-dotenv-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d83035ce63668bd4eb199426469192d2492c2d5e513bc731b0d837d9e29673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-webpack-configstore-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa837eb1c0466d00c69e8afd0e42d09c3bab5399f484e35f736cde5231a9dbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-altair-native-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-neptune-supervisor-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9024daf7d2ad19f2cbb51c1254f5669986b0d773d1b79e4e55ba3ccf27cccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-tool-magellan-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68a8262a254f0a9406a021375b356e800849625b8e96972eca8a227193dce94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-phoebe-aquarius-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc05a74a579980324723e78032930d587d6d67a1b120c30a59e228eeb4a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-nconf-quark-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3a3d0303ed5512de8dc5c006cf26b69d0a9a5dee11ec25b3c8433f45fd3631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-optimize-css-assets-webpack-plugin-auth-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8382ca6a8e541e292bab6da68d987f95fc70200f8bf3bcd136415f68699d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-fornax-sails-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c14aa58fcbf60f8b44759f0f04708943f6dd17c17579a1d6a4a3db3178caf9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-taurus-callisto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc032180d0a076e255d77641301840aef565ca59487ea2c3a303c859bb6d74b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-node-sass-transport-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091155c6dabce4639e5daa79ad578fd54677999586db168e80ab5458d8580cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-protractor-fomalhaut-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4aa076d16605f852f34a40ab150b55bcd62c3c8df33c8f1fa61916e50f8113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-atlas-spica-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067b8b530c373832061d5f175a4d881584493dd9a7b8a77b32796735fc9af307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913af6b808b2592fd435ba6659a92acd757d2e960ba9668aae34518b74dc98bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139626 Malicious code in async-hugo-yaml-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c0e1b1c15e19a880c6cb5a4a289493b09db9ef6d668639e8e3419b0c1d2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-hexo-scripts-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cd4034114950b9d64e45cc0f7a96460d48a9a2ff00a3a936f8b24362857b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-hugo-node-config-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18d81c7012eb412f8679db20a766a516042723987121a382c43cbce0300fee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...