Malicious code in version-altair-jwt-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf1dc048a8380f039444fe39e20ef82957c666685a75b24d72d792e31f15f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d87b05998a03cb70ec6cb8b456a568c2d1826fa8723063940c54ca424a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-meteor-xanthus-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73757b5db68e1524325daa3e7b2769567c1ffde5bdf48127d22497200dde59c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bulma-mocha-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4d1d54b8f25c3f3912f8fe0efdaa4779ce0fd2a782786d350f986a550ed31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-ophiuchus-despina-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c4bcad394b60823fa7432a1d7fda1282df8ef8ed4e41b5c7a2bab967654358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-passport-hyperion-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b1717d7f72fcec0841422679aabc0f3e49522afca70aa518e274c8d4479e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146895 Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146010 Malicious code in pavo-subscription-hyperion-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab658b5d1b09c534e627e2c84470d76e524048050405bfcca968ad892688e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-izar-meteor-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bbaa8857adffc1887054498110d02d4405e7640cce3cc16b238ec53cc5f0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-less-ultra-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9facf436ffee1a81fe6001171e4f6aae72723ef07ac8d492108c3d17fa5c8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-babel-cassini-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40143ba548c31793f042cdf340fc83a0f912cc7d59d8f0b4b7004398a8425066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-carpo-yaml-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cc2702bf536ac942f0062c5a6c776da5fc9a135b93382df362258e62dbb975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-bootes-radiant-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050a045bc10e41c3926121ea922e01fa47baa0f522d718879a886b21ba3357bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-aldebaran-eslint-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b3d94674faa2d791badc098c041f3b61d7592d45cedc12a36f44ce3b39077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-materialize-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed6bade7d741e881a1ad5db1fc1aee5b73c774ecea26fd42ad6d9811499188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-geckodriver-framework-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11eda0eff3a31bf162a1a763e086ba1b1fca6028f2c5d4fd7921103126177464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-envconfig-regulus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3094685581e8535286d53ba4a65d093b12a027d9f305edb393fc8e9a267df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-upgrade-eslint-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34ad3d49dcad1f0421367563dc40724da0c20deab13ac06e1f0f83f6a092d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...