Malicious code in spinner-tailwindcss-sqlite-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad336a787df0feade095708c35cc19985da02e0ca85730947baacf7b25f7ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-spica-yakutsk-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa73545e08c8581da0785fb2c246e476c0ef4e4731c126452998220cc1746b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-carina-forever-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f91ef5dc4c00f9832c98df57115357c304787af3987b4df8eb1f049d795218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-airbnb-query-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb050d689baaca98bb1d6ea4a76f49373ce16319060532410879d90b9fee0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-cordelia-soap-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34db0d66276bb8d90455f75773ed99baf3815e2d4b00e53033c7a4c971e357c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-bunyan-warp-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758f8e3c3b06dd11f060896d9934e304f95b6d59d51eb8e698da76bbb918705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-karma-airbnb-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24053c312e087113d9cf6bb899794dc96510455bee527c75abef0bd3abfba6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-xerxes-cz-conventional-changelog-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a180942ad1f57fa83e02920ed2f76bca1b885d147b191824a218655b701dd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-terser-capella-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1313e3e3f93703b6b22a59de9916d11ccb6378d4b340b02f531a428f1b8515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-europa-elara-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e18702b422c428f6857ffa13ece7e9599b9f0a24287dd9bab92211383f85a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-ignite-hermes-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726b2645751743cf3aae79ce0cc9b10a4997d86f928762af4164921ef402202d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-chakra-ui-style-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2ecdc1f1c9dd4e7569cd2dcd1aaadc864953a62692e919a4d01de8ecd3e943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-levels-halley-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1322a4601d3aa4de9ab3d431b5c3612263a5b4d7a1e35653bba6d38cd2a8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-eris-norma-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbf62dbc0285b74b3bcefcc881a1cd6aae2fdae5f5a5027a8f2028f804ce385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-playwright-mui-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3008a23f4cfdb2580eeb64864c68b8e25c16b631c7028a73cb15f99eac3e0852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-enceladus-hermes-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7beddd9bb4e89c7b1ab4f83468cc131027d1fcab41a2c573179b6b4573f24977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-docusaurus-toml-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d64870398424d80f56358953b2ff20cee97a9699f8cf2d7e2002cabec852ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149779 Malicious code in yakutsk-resolvers-phoebe-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f5fdc72d93b4fd8896a336557775e4a55ac8cfcce0a6c6bb257314f79673ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-prettier-deneb-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c59b0bb14d32d33de09caf05e26a206dcbb29d38932d052a6a0e71ae6569da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143327 Malicious code in hermes-spica-taurus-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1b431aa27cb794f183d676334d065bb20c5a5aa85ada442e41a3e2d0837ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...