Malicious code in corvus-levels-winston-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf00a98772a23d0acdf2e0f571ae86e7537587f184063460e54cbff80f48f446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-centaurus-pipe-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3a8c18f7ac238f1acacd09802476e050fd2c967e0bf88d0d81b6c9e94639a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-gemini-oauth-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4106c023551a8a784aca23591a676915bef17fdc0b2784ff7bbf6e37865ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-avior-native-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4165dc10ad42b1d39155548bc0cb91c1dddf403fc627a257b53939938306b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-lacerta-config-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889402c35bba670d63a6ad381b3eddb7635381d2d40ca3e04ff69bdc22e701a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-juno-uninstall-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598f75f9bebce3cd6831090987228fe25f65a87b1121c7b3ef723201507cdf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-nextjs-halley-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79f182e64fdaab08e0712c8d14b93f0074ad61ed9b5a6edcbf3f506b35260d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-shelljs-chariklo-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbac76d56e5ea533334cf5a8cd66bbd396bc572f97cf384097f8a2e9f791d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-fornax-sails-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c14aa58fcbf60f8b44759f0f04708943f6dd17c17579a1d6a4a3db3178caf9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-dependencies-geckodriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801176c7498c86258fc33864d1d1a0405d7ba7062ec8bb2514017ee4e04b7f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116701

Malicious code in antares-cressida-astro-deimos npm...

Malicious code in wasat-procyon-semantic-ui-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c618454ff76cff11e80437fb251c750fcb3143a8744cbf519a2690c43e433fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-convict-io-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff837e9f66bdce73e63e136801ec54bd54f71d91562f3848829ef721900b433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-aldebaran-library-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd34c4804052e58bb8e2171574f6fa4264bdf835fb2a96269a81208d7d5314d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-cross-env-nebula-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025b35fb83b50288be5f6c7f07f992e963b337094085def0b5a13b58ea2631f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b67d0947219d9c28f83df53a00911736d07bef071c3af1c08d8adc6e483569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-sass-loader-axios-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da37f8b8f1bdc913763359c08e8b7a35cf41c0a115cc87a8035c1244809420db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-electron-builder-ariel-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b12d49adc296fe483399021ef1bbecff0fc0d88d33f104b95264cf4d455f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...