Malicious code in io-pino-pretty-start-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7227feb91a808715799e857158fe7571b0a692dc72fd0f919c3b346390daddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-sagitta-arcturus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f263347af926c75d89e614c47c34631945ba0c0b5b83d24cf8f13a6213e2eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-package-socketio-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f915e092e9aa33d429080d892b1bb8876a6c35d98508cb80f9051d0eb83f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-slides-blaze-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c88be71e7482888225f7680add9cd29413792e910587914de99a7bc32af6ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-stream-nebula-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38e7a1ab56efe7764e9f41c224575c50e02d176028d4cdc32466f22022aae16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-vortex-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f82c6172c917e1fe89c1b3de08f1f7b8fb7a88d57cd33429fa4cb05c4baf99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-frontend-sqlite-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5637c1e972a444b0b66f8940c38cba7129ec9beaba986b3ea79bf0ca0495491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-hyperion-morgan-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8b017e87cab1331f2b8c026fb02605c014ba3e727b00836a191223d6e44a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-leda-test-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a21f6351d5a2036a3bd77b33eba4565d2a5efd4c25ee98e9a3019f669aef35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-eslint-plugin-tool-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac54f4d2edff8617d2b6bf546b24db9955319580e902a1a2b6b5cec468957ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-sirius-lynx-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3250323d484e817f69507a804d6b0379ef2de404ac143263edc581d1201620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-zenith-chromedriver-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015455086584d741f34b2a1fd658c8c32248b4fc6c94dc2fcca14444c7b4c927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-antd-uglify-js-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7016f279c830807ab4100eea0dd91aa22fe208255df8978ef295d50256a069a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-quito-middleware-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475f449d7bd5dce4851ae837b64f10777414bd115d80a9416776f5418ac55b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143717 Malicious code in iota-cross-env-socketio-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-izar-acamar-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2f69723e6ac45a8f9eec34bd98de043eb4fd1d3f3a42a1a89db218a461dd9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144865 Malicious code in mensa-tethys-local-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2701a23daa25c07ca722a238b8a79644ea9150a243c248fffb23841bbcf42f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147308 Malicious code in request-remark-sadr-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55198b1951195c04b8787ba7ffbd4ae734f7ff221bcd530b6abd49b8e709a72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148537 Malicious code in terser-request-test-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d93cff86f78ba974b32c4a49a98e38139666c4e5f9eaa44ee82074c2c4ccec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...