Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-publish-concurrently-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ca53b27778645d89b96eb595882242733d814a4cfe82678efc4b8e67b9ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3d7c7613ca3b24203a1a6b67a092b1b7c05ab67e78b886ed6158382f56e95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-colors-aquarius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911081cb46abd2de21389ef7af5d7911dec4ce37cd1ff6eec6f1cd82585dcc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-lint-staged-apollo-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7663ec121540f855126afa6ae53b512cdb1548d4a95d3abda120df66dfd982c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-chromedriver-typeorm-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65121db18f2f842924287b69d612aae8a58a24bd12897bdb16520e989bedfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-odin-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01bc67b2111bbd551d0c9c745462194540c9874d0858278baf52970910e982f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-forever-bootstrap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664a9a6197e54174e920e47bfe1732ec24d3916eb0c990bf54ccfbe187e4e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-jupiter-antares-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9475e6896f644cad679372be114f300b3ac25f0ab22b63a70f074f55dd053c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-google-yildun-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebd3f347dd7bb4ad386fae1733a6954156c5ca860200b6c24d20e396d0a3917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-algol-barnard-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afc1ddf515223da7330acabea06fc8b87301c4dea1c65047835d6e0e233f33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-antares-altair-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1dd19c2038ff973dd2b4ea0902b25852272ab1db03e4ddefba38fd37d87ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-upgrade-eslint-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34ad3d49dcad1f0421367563dc40724da0c20deab13ac06e1f0f83f6a092d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142815 Malicious code in ganymede-procyon-gulp-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c3622c9620d1f5db3a00260053942b400b3c7190d56eb40b53dfd21296efbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139209 Malicious code in adonis-barnard-commitlint-config-angular-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e30834aa54b97707b8f7c9bde05d8df1b16e3072c88cc6cd8726db3cc519bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146398 Malicious code in postcss-loader-luna-eslint-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339b954ad1c5820bcd5e07e8b57037f08a5208d8bb38e2159a7c89fd9ba3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141693 Malicious code in dorado-module-centauri-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc48c5da0d6de22d1a878291edfa6b66e1ba73e9a36bab77ba8939963d3e8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147390 Malicious code in restart-protractor-auriga-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6c74e5d8b67a20911a113bf65794db83dff4dbdd74a3b2a604963ae5a756e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...