Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-pulsar-odin-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5e10a1e80dbe898a0eedbdd73f7c13bbd6e948693740434284cc0d8da36917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-wezen-nconf-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971b1434499a9fbd6456451777a548f2b380dbfca4750fb5aa08b2389ffaf522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-axios-mongodb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e173859d9255f417371855a249aef1961a30d39eda19f4b23ecc555ee150b732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-radiant-sagitta-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c84a0ab09a6df815a8eecabcebbc28db9b5288ca23e5fa3780ee9e790461910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-tailwindcss-sqlite-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7d2c4df32fc567b689d9a1bbf8975994a17c7e260c5fa4dcff587b6680ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-pavo-sagitta-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843f2c4b1603c2df6ce963cf271709d299c53464b9cb23dc1b53e9310420c00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-build-octans-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b0a98d3a3ba455a53d80b80682430befd058e5be89086e648c677c3fd72324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-atlas-bunyan-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342ccff9c90a37b95f109a686f983a092bbaa10d056793b078819132e688deab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-stop-terser-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51be2fc585f72ac5e1c652ece518c196302ce3e5048abec0a7233a0cdc0b4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-algol-cli-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba74dd1ed1fa86b1e45b96f7225f5be8ef4b2a24606e0c856dada5cd3926b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-postcss-carpo-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f14bee0e8f72fb8310de841e4a0e25703322b37012c06a27f037259587e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3781c2b35c32db7102a4b5fe53e960e27ffc3ebbe36d1de5dd2d10485b7201a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-telesto-blitz-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0359ea68b09faa00aac058a15089f39984b19b71e3754ae36811855066c40239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-mocha-castor-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf50b62bf29b274dcb258f4cbd7260d8799e01d06ed3dd44267be145c4590df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148271 Malicious code in start-husky-nightwatch-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20316704e355b8f90ebd7ca6957fb6a2bac05276f95761d8281561f3a11757a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...