Malicious code in cz-conventional-changelog-supervisor-loglevel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fc46ade320c9f26fbb269899c5d6682e7f1674db418e2938c9fbe50833c033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-quark-middleware-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5904a73a97ab4e110d68c896be2b1a4b127e1de6de120003269bf3fdb442bc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-supervisor-child-process-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3228854c092c2c2db97fc3ce38d83f267b0a435bdf30b7d446f564e17838650e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-less-loader-middleware-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae569a3671d9274588de48ed5de8d667d2f2d636d898cc6832f261b42ef93686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401c0c0ca553872fa48d5cbb6954f3314f7e977b5dd6ee50218468026d0d7581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-ursa-ganymede-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b82a1870f0af524291e5d87c8b3202b4a81455ab7aefd3a9fa1f5cee925f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942efe758bf59cfbd35ecde32f1b9cba47a8915da2bea6632870da311e5ee031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-passport-event-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf8003ea6e13f7738d4e65e37de9cd73ca9fb6ca0cc7bb83f4a2ba932a3f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-carina-alphard-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc95c05b6dddcac49573a7f3dd3002743164bfe3672fa8aafe3f35c9a69f124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141090 Malicious code in convict-rollup-plugin-buffer-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1699050cc592e2f8d30b48677a2a5a646c3a34aec6b04b98382047a46574ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-lint-staged-child-process-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ab151e5c0d52b2aeb1c511fc8e2c0af1fe4b76287c652e201166c704efc0af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-package-spinner-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67481eaff1ab609487e64181fec0c051ced741075c652753d934342f610f9fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-titan-geckodriver-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309048557f80f69e3cca66d2b574290a645f381dfd394445ea4df7d85b69af60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-vuetify-kaus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2033820f97f916e773d13ef8133bfd0610ebcff696815f0c5eb8325a51bf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-restart-koa-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1780b515b5dd9b790fad828a8f9fa7156196bc7166d320a62ce6341d0f4169ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-loglevel-luna-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c031d871b37a23d8446c98106ea76b2a0736e3734a7216e261fcd0f02781d40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-fornax-start-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6a2c4abb42f5f3186fb4734f53bb98dec2cb33af1fd697699823bbf6cfe4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-subscription-gemini-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ec004a9b8dc4a23c4d08c038f547db7c94aa33f71776a9d79d0e9d9cd27421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-ursa-triton-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fe6abaf7b95539a87fa51af803b1e73749edcbcf422918007d6ca8e2ff864a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...