Malicious code in yonder-altair-commitlint-config-angular-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16de385d262c74c14cb8a9c647ea883875717271b69fd0efb991c16a3679a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-async-prompts-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5fc19090c0485f4ed4364f6aa000cc1dba19998acc98c7de95fb08cb3b9b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-prettier-stylelint-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f28d3b55edf0f2e8a35cc81f0cc5f431232659438bbd5565040e2cc2dfd17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-sync-stream-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272ae80d612727261195a18032ef87b80a908a41c49a641ecef28bc5ce12b63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-rollup-plugin-chariklo-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc146fbdfc420e6edf55add804abf5db01e4546ae4b3d20978b40a12d156f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-csrf-slides-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-orbit-grus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0325ce27bd89abd4c5ae9d6f7e37c7bb7c373892a59f09c7ff589164e0edbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-writable-grus-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc35fc95967e6792a523b2b50ca9116565941ee17151c3a44088bee86775c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-chakra-ui-norma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-mysql-element-ui-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0b37c887e82b3f21d7c2b6fc291bf49b40f5d203b7087a9ba391acf920be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-betelgeuse-relay-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcb555e3d60d4afc142c75c5e27a22f2263818400a0c623dba7c4630cdbf9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-sadr-ophiuchus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feda0291d6bed0d6bc08e9cc14832ec5fb222ee2ed5ea483dd4932982f6b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140064 Malicious code in blitz-thuban-mongoose-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38b52da158ae13c533abaa878bd0546783bdc722f4e37c25cb1f7735c7199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142958 Malicious code in google-element-ui-public-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede3461f8d9da03935a457b03eba0d733327a5d60fc69dc495d2ce0a40c9ec4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149470 Malicious code in wezen-spawn-oberon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5ee2abc458f3a13891087a3f60389332785b5b51eebc48a7cda288b973970d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143975 Malicious code in json-impulse-websockets-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b4f7f43fc008c37e24812ac645b40a06a9a8604e0b3976e987f99ab9d28778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-nuxtjs-achernar-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b194872f9972ae698caaa2de3e7002b21ee196dca833bc5546eb8a1e729b361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139902 Malicious code in barnard-chai-public-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f19577d367fc4d0fc720af976a8d7063e66a4eb3209ecf31de69fbf10a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...