Malicious code in indus-install-procyon-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4c20f3b514ef8beb31576a698a1ff40f0b35429dbaba3b2cb6943a420f581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-request-postcss-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fca1fc606cf6304fd682277d3fe822752201f5db947bc62472a4202d2ddc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-websockets-child-process-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd862db44f15783dc21c6573311ec73ab09a2f68e999308370e492454719c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-electron-geckodriver-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a63df6708cf72c0b4c2dc07ecbb3b9d21ca55caa3ad7e1917c8c401d9860a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-cache-chai-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd5e75f1dc520c9e3c5527da3ac7c209be59d8b37027452fc635b60481ef591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-fetch-corvus-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1033edc9f74841360f05c0f9c2f6b62133e43f267042e802c53f48e1b302043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-elara-arcturus-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31c55e192550433235a3c031a4cda8b30ee9f66224b49942a341e0b5a126d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-cressida-ini-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a0afc256ae308bd210e19cb7e9518884975fa81f7bfd69ca7ca2e1ac55bf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-grunt-zephyr-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5618c03ace1b7982597f2237ad3ce62c1e20dfc2b23419fe11450d9d6f70b7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-hermes-jovian-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f575ed011ba9abd16d381f3446768c3a2dd8a2a7158234bc708e00b833f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-virgo-less-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a0a6b7d9a44c8952af3e3dbb40af74f2ceedec34b367f51a806d743e9bc64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-nextjs-pegasus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2395e16f16fd91bb12bb0f7ecc86de9d718432c37009b24b2167bd90ad6e98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148845 Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-browserify-public-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d323d7c84f5115e992460072410129438f814ee9e3a999918e849edbe98e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-cosmiconfig-google-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde950127da342b2375027506ab6050f96edbff872c390936286f2f3ee67fa03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-cressida-wasat-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0fe8088deb79bb4176a0feb311372b483060e8c976766f5c8670779c1eb9bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-cressida-wezen-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325aea0435d135ada4d781fcd39f53000ae8c2fce613106b6a0e4fe51ce8a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-framework-ursa-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762d633d317ce47ae0ade8176855d229355633b914f402b4e29b5b9a2b19a02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-zenith-winston-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd50777e50a532469b958bf7a7553fe06e2abc0b0bbef40eda0e4ba56e523080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-webdriverio-xerxes-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46c7044db02697faa91ea47e9e00a9fe04e7e7215ebd93e223558d8c16fd72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...