Malicious code in spinner-fomalhaut-postcss-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31c29c2c964ade0090610a05400e3b5e75c13d1d4a58e13bfd5325f5bfebf6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-sirius-triton-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba9bfee3d27850afd5afcbc2fd48b4c5c1a2dca01fdc00594dff38486c92629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-css-loader-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc9b93c027937183923cf0c75079a363eef9f31123a01c0eae6813aea03b2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-ursa-bootes-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3245fc3adbd9e9852df9a8e88db35cd0e9d70c380fd57dcb2a3c0dc2e340d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-scorpius-kastra-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206989ca281bd8486109bca034dcd43687f4928eaf2c88002dbd6dcc613c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-mira-blitz-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f4e3c4abf2d34bf952220e9fd5b0a2bc93b6bab7ed1e7e4bea7acb27ab3cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-got-got-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883b4fc41b4c70f7a904bb5efcff4d34e0ea12b981eb6096971d9a6f3b76d4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-algol-websockets-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57bfb271ed0be2a37c4903201cee169c43cb8a36467c7594c743bb1addd9942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-grus-morgan-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cf6eb17521dfa305a33e0990d686800f538681feeae23d261273fa6889f5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-hyperion-cressida-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2d88789abfd0303fda40dc8d67147003b7134923bbaea1c25c73e6fa27a5b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144031 Malicious code in juno-magellan-acamar-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-loopback-jovian-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b75b0fa3e819aea9c2aeaa0965e6cf53c370bddae1dacc9fb0fec107471d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-react-bootstrap-development-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b093b4a8a3b03954d6d7276fd2edf1d96030f0ffc91240dc63f59f9213f8fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-jsonp-promise-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb40a31cd11f675d3723d8b1395719704e6175d0de1759fa6ee4004879d0d6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-configstore-andromeda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ca62aa2ca7610c4cd5bf3fecb7bf63064685d407bcf3e930a3eb2824e01641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-miranda-yonder-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9522058eacf385789d7b9d2dab9db3cb50cac6b1660e926378d440f667f67abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-xenon-loopback-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d8c1cf4be4769f28961657b1b667b9c23ef543bf83616d3ed0a93c1f5134f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-apex-react-bootstrap-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1970fde9afcf4aed637d9a4801d60378c96b21ba6bd3eaa788e07cea42a98164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...