Malicious code in global-dione-eleventy-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa86d4174d75787032ca9ad72fe97137a727c350cf3755ade0e4f4408686ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-html-webpack-plugin-impulse-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5363694bac4371cfc54011da12618a13ca07cb0b648c0243aacb32b1f569d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-async-sagitta-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b06b3318adfe4495009692d720576dccbd81fb74b2e9c690133f67d70fa5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-cosmiconfig-passport-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac3c4fb6f1851d954cfaae38164bfeb87249be82f97d7e6ba1552473a461f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-rimraf-orbit-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8dbdb8fb598ace85ab132ab2e8e249b3b8f37c34607f4a50808f231b4d761e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-chalk-jabbah-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dd6eadcdd25956317466d57b244fea1c46e8e3e005f9e1041479dc608fa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-gulp-proxima-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ba965195f1d4a56aabb0fa309c472adc314ed7bd6605574f65f81aac4897af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-hapi-csv-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c05bafde1be0d3c7cd14dc9a7063a15613942905627ffbbd560696a78aef88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-sirius-request-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ecab9e178161b631a734be3681ba71114cffbf50a4874a3e80a01eb246d304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-mui-yakutsk-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928553531d3c4b998456ef1ebd1e1ea1aff5299daaec81eb8dc255384d96a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124776

Malicious code in mongodb-vega-nova-weywot npm...

Malicious code in barnard-neptune-celeste-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-rest-atlas-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbf9c3a8be98e085596d912e2d26f66b7541cabe171e657f3640996ee2f23be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-slidev-ultra-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-chalk-kaus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90adeb8f738082faa8a3feb2275ba022c13d51ef8f71a33c1232ee80fe25f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115111

Malicious code in commitlint-xerxes-deimos-adonis npm...

Malicious code in wezen-soap-grus-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c969ec135ea0e9b782b9b6c0dec74f9cd771881a5044ff40e24e14d193616bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-pavo-tool-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2addda10f23ed7cb19188abda0a250d743d2adbdd413ab1c73bcc665ff6803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-phoebe-spectron-webdriver-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f2df56849161afef0e61b35720a8f08f6de55bf2423f2fd6a6c56a34555cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...