Malicious code in janus-fomalhaut-rate-limiter-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd3841be35626649aacb44b41b13db290ef1dc661070b516c2e4823083cedf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5814aeadd2075aafefcfdf7e08fa80138940a6d61e92b031d99103d60885e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178261

Malicious code in json-apex-bellatrix-docusaurus npm...

Malicious code in docusaurus-robotics-supercluster-sublimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39e2608b2f82ff530582218d014aa91796cfd3a914e2f496c0d2134cf7c5238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-despina-readable-oscillation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adef6936078e914f40a91db6e76efafdf970222f3620390210150ef16c332cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mock-string-simple-final-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38d5a29590fbb31cc80dde1e3ad6cfd08ab4787dfdf5aef7c978472bb42c5d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in omega-big-zero-export-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6452494d4a91b262c8f8c973f098395e47d3fd525719d07e2c95a4915fae749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-eclipse-sadr-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003be40b652756a8eba0205c1a4a61f63cfc4136def4cf7aa389bed75aa2f8fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-pyxis-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bd5be5cc1ef899ff08e6d1c416a3327828641b760effeecae17fe1c2c25e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-holography-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f786ef6f1326d79ed74a82e68991e790daceb5da183862a7f8406b1c60880be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow-data-moon-object-serialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c49854e181d4118e50a6f9910fd6b567e67cd382a7ff14982b0a228063d3a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicweb-antares-lithosphere-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506cb2e0e182f936ec1b74d381874e93fb15d69cc3a6e7245f53e539eba8e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notify-omega-process-kernel-protected (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227e8588cf0cf575c422c862ccc3a11b88efabe78157d3b60216f9835b90158c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-perseus-zenith-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e0fda9529023a9e7ae60ebe50dfb049b2ebe3a6ca123f31ad56a1ef6721213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saturnology-fomalhaut-geckodriver-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2caba52a6e0c88328d81e8c122e414d91225f1c1fc9d17f8a5aed4ff943da7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-phi-cloud-cluster-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0e9984087d6fc6265ee22bf94590da86323c7d97b5205d237579d0a5556bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socket-uglify-notify-assert-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79e32644b78e05c920de11e095dba2ea5f33e39ee8abd5838124522edd0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeometry-command-iota-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625535a7d50c9abf08896ed43070f216622328e54c4b03808dc7f8cc5b6fcc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-farout-html-webpack-plugin-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f90a93fb08acfd5f7fa33fa6b6f7fc638d17fe538b4201be97e4fd9c7c056b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-heka-google-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5c65fb21b2b3d1ecc525d9eef20278307f1623df27345292cda8081c3ce4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...