Malicious code in auth0-style-loader-polaris-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017babb992767ee4824521e3abb64ee04ac53ee11d2883e77db12c39112dbb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147061 Malicious code in react-bootstrap-hyperion-gemini-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1223a8fe17c4091ebca85d8c9ec163e07248fb1c3978935ed1eed44557b75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146811 Malicious code in publish-sails-yildun-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4131be577a8fccfe05f69672359fd356876315139acb90829a87d84b5ab89f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147249 Malicious code in remark-jupiter-izar-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f042cf9e93ef7df1301cd154a2f46c3036d8aa59aeff13d8c1d9854451064ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142737 Malicious code in fusion-jsonp-solis-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ab6db8e999cb39a39729af5903c86fcd6c5d1a9f6f9619a848337bffc56226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148427 Malicious code in sync-norma-algol-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ad09764898dc0af2247a64191afb7bbd40d6247e262240655bde8603b8a716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-nuxtjs-metalsmith-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0530eb1ad39700c42120f582e87d6140918e039de76026941107c4042d0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-pegasus-leda-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dde75e0281b160a1a965a52d453bc16bb0ea64cd2cfb4baf63704d8af393200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-nconf-package-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4861844fae84d7b05a5030f56b0acc16628a4c8ba3f5d874c50d0f49d20539dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146795 Malicious code in publish-miranda-hugo-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d719f466203ac256381e61c67b5979ea11cc2ca7278330ca055096e9ffcd71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140853 Malicious code in colors-izar-deimos-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade47e5512f5d5ea7ae6f5275ef4dd11f9b97b478c61a8fe6376509bf39e0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-magellan-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52039775c5083912cc2f65d59589cc60afe8445d9510280b6907bc13154e2861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-readable-convict-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47b64242bbbe913bd6858b1d8ca2108b81b19c7a139358d52a8af25bf016648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-ultra-hapi-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a2f2be72f028c1bd41566d4c6dffafff9cfd064e1de5c737a3dcc95aaebf2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-atlas-jest-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5f147fde98a922274e900cd54befd2b404f5b5c90d849347db757a294df9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-hydra-ophiuchus-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975502bdabe66180670d191f6d6972defd72b26fe8d949223a83143d48948ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142995 Malicious code in graphql-apollo-europa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f721d637bdbdecde413ec4901bb6ebde3edb518397261179621a070d8e961bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-hugo-winston-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfdf061a2794f8911e73a0f36fd0d80603c5fed1800c355ddc0f4ef97e5a82c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-nebula-cygnus-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e280b5604f2dd401da43328b78c2c409e0edb233c8e0c006f4dbd7dd0870c4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...