Malicious code in standard-callback-venus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54afa4fcb2836ea95ffb5db003dc4c6f9a022be7b0b74462aacc150cf13c0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-xenon-ariel-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1e4e38e52a8671395f4bc99d4b8fd899597b95008321a521a2a9351afdab05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-redis-axios-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5089f5ec78918d36e8cca7d30a931bb7042a82580de245074e00faccc56ed2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-configstore-blaze-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ef9581ec039be05c2e51e371aefded911bbf723162e1103e5cc9b7d919b95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-lint-alphard-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3684fd38755e805195dd3647625892859bfef3ea8e3c810285fb6382548a89c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-parcel-equinox-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fea44e964513c03fa384cad1bcf592cb72c5c8ba8c2376c970550df47171932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144836 Malicious code in meissa-superagent-nuxtjs-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de55d40cec053feab657e806de32600c5da394aa913402b5aeeafd0c320485f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146055 Malicious code in pegasus-spinner-google-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbb62fe13e1ab017999008ae2b7f567d60822315eb71cda2bc05b0f3987ee87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139392 Malicious code in antares-auth-thuban-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c3046a640463c0c5ad0bbe94e2f92ee4bb4bdc71323242d72796c0d5abed32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-blitz-radiant-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2272dce106a80652d7130e9f69d1980ddc9bc530edc7cba63e8fee9d913ef8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-mui-iota-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68e01de43ec016ed5269f79e51129c4519b0191192620c44b484a9d5b3d318a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-delphinus-rigel-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92fadb7b85c2e89b10089a57a32deeafbd27adb0fc4983fa35668d33e523531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-loopback-dactyl-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e705ee7641022af9a53f63bfdadeb16861e696f1ed1e6802ad91b6726cc24e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-andromeda-xml-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edf12aebde5c3ce7e57862217e21738abef833201537b0dc7637e4a1dc93d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-spinner-hermes-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8302d0741db7d221e02f8e9ed2a744e8586ed4f7241cb1249ff6f197772e806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-acamar-quantum-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b5c9916b04c82c901302f7b2133140245aff21e8c829542aa208b5e2af2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-cassini-mutation-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401128304cdbf7c072836cf82f8fee13b009ff8a7e027f96937fde57663b0d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-less-janus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9d6033619dd075c66d22a2b5e6f8dff5062b06e279df511f1244751d71c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...