Malicious code in wolf-antares-uninstall-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37908e13e3b9b904f0430d7825adc9afec6ae30f58f69e0aea1614bfaa2d854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-stream-less-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ecd86eaf3c1e82a40581f4cf468c1491ce380d9ddaee36e03324e2fcf1bfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-sails-eslint-plugin-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5795e8e9e7b64dd726d1a7c4d0abe9e021363d84b51f5fe638d0ed59ae3c16d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-sails-promise-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6d1825fa8d2aeed6f1fd7dcad4ee8994ab9e7c7f12f453f35eee3d1a8265ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-blitz-dagda-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ceb461493519fd852399f556b21d8c0ec514f74c1d9cfd064ccc69febfe0faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-loglevel-webdriver-mocha-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fa227c4b682e4efbbf01ad0a3de65c3e135e1af06ba4b2149f3f53c6bfd3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-phoebe-chariklo-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d10a04cfc4a77f7d8b23de62c16b71dc0245fd1fbd0214dc5ccd8412477e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-superagent-sedna-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d4f07a457df67ef5a49483ad7c134ca928b0e545316389b55502ad45407669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-cluster-yaml-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ef61cd59299c1e1e48712456761e4f094ccf8cc370ac9410fc8892b0e60bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-warp-deneb-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31351039ee3976d42ef27a0cfadbf534a3aa29a2c6ac05fdce3d3a713aae3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-ora-typeorm-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c7e55f71c3f14590cd8d94dc6c2294d09aa2517827df0a5dd864ce315d3cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-barnard-wolf-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b72f6f1b19f9f156958d490ca0d6d358ae7e033f2904c41603c1671e55d1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-markdownlint-start-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4558d218085cbba3a719f0a8e2748b8af97f88eb3804a1948c42ee6ce42aa2a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-grus-nightwatch-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4daf9d787d3a053b657f214222fea06c162724ee8a4fde668874c1b9b122b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-titan-cz-conventional-changelog-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ebcbb6b401a4e9dcf5b69e8d8f3e68be1a9f58d56f30831dd47a44939695ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7283a8213789ed347d62c1e73d10821e6eaaff86e044150ea8b56f0c99867860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-style-loader-miranda-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7adc4b81369d78be0c306888de6a7958b95cae36dee66b5bebf086605344d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122516

Malicious code in reveal-md-epimetheus-impulse-procyon npm...

Malicious code in slides-hydra-cordelia-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d6330753c3485dd0c3aea450f2bf3977f19c73564ecb88f67cce4605e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-pegasus-odin-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eafa0494d823d7d10a713b9c3cde8e4e9386a1dd4780a78567fbe9315140e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...