Malicious code in react-bootstrap-draco-nuxtjs-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503cfd33203eb61bea2f55c0cc50a030ca1af9d5506549c886acb9edbd9776af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-csv-bellatrix-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d3973375d954986667ca7aa33aa2b77e079ce52e861180f1ea202f3071fdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-xerxes-dotenv-safe-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144d57ad69e3cbf66d737ae2db5e7102a7489e5a07e294d84196fe3ebc72c974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-altair-chromedriver-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d19135a93f63b1a066279e697b75d24109964e085449c635229caa7d16d56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-spinner-dagda-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-perseus-delphinus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370b99d13baa843ec3e6b05367062a9a8f526f0778000ba19ff3e22729a31288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-readable-thuban-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbee7af91fc32c148f8c4a3e601df8ffa2dcc65f0b9e8a59b9b012f3e6ae5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-antares-altair-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f3108b52e57e82f5819ed94c64af83d8e0e7adf6bae76b340b85ae6f7ce636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2830a2fb96d2b57865f9092fb10f30f5a3f718fe0e9e982c4761680dc9e7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123431

Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec npm...

Malicious code in ursa-cypress-perseus-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba32422cc6145356c90d43a80fb2674a7e813479285c4b7355450904a54e6349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-cordelia-equinox-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46b1389b18bb4e7ee0154c9924cc3898400341116f0121ad1e814fb7128204c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-apollo-alphard-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150d51d65c1cd9493101771d11e68509daff5b35998f15e358c5b04c72e6604d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-pino-docusaurus-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683cfc14e746e8998888746ec4ea2ac14ca8ba402d97fc8885f45b80032fa875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-geckodriver-aether-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18846f63f307e6c3bd0ab988ed29bd9c00e3411f32d9b783a0b8feafd51e01bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-vulcan-transport-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d41e24e945045beb52518b6e682a15231870631f15e6014c5b9d677f7b405d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-hermes-mysql-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e284c810e73524768e435e0193cce5ab7bd48efdced7dbdbdae1e11f48cca83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-jsonp-less-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01ef6cedcae0b8171fc191b67ad90dfebd8ac6e394c7ce662b8e558b22e9d56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-vulcan-lacerta-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee152af5e0dcc5068bfc21b3ba72197064d1a82c2e97851c04f94b589799f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-pegasus-nebula-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74680d60c8785d4c5bbf23d3697678ac626220a25c6896b4e64bbb7e125af006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...