Malicious code in shelljs-ariel-ophiuchus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693053840c257ad600fff44f093b29ccfea20e6067e1597aaf6f8e47ebdb03ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-carpo-event-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c2b56519d783da3ccc64e57653e3880074db5bec7a185adf0c14cde83acb91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-changelog-centauri-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc4dddb8925f9a970aa7c5687caf4439035af040dcd9f9d60675c26aaa27ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-polaris-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eba5f01f9a9e3d932f8d07a8043fff56153b5b693c9f0aa45bd3d51c997c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-docusaurus-vega-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defa0b5b7d3935632761f8104c355233cdc5eb7bda4b19de5d665c6a77136b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-rollup-plugin-chariklo-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc146fbdfc420e6edf55add804abf5db01e4546ae4b3d20978b40a12d156f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-child-process-colors-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fb75103e307e237f68dba3740fb8ce1abeac8222169c1b09e1b817334b60ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-pegasus-transport-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10990bdbf8ebcca8bcc01d9ba3c1ab248f0efbb2723319e0abfb784fcd048416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-quark-andromeda-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a080ba590ad542c293ea5b3d7625e0f1ca1119818b77c409f20bc816283d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-sedna-config-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43906a33e5a2ddc0d2cc42afd7b3de61f0633341da24e78c77dd8d10d088a558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-europa-rollup-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b971b635734164859f470126e1df9acbda4112807b2bcd956b710fd2280676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-aldebaran-eslint-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b3d94674faa2d791badc098c041f3b61d7592d45cedc12a36f44ce3b39077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-supervisor-dotenv-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2714d08ed8aff240d888fd65a138d36e56492e01ad10970dd01de5664bd97de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-antares-uninstall-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37908e13e3b9b904f0430d7825adc9afec6ae30f58f69e0aea1614bfaa2d854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-cluster-package-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403eacbc4e8c829cda478a410fd600fef4b12a8d2286f53a393b36e45c6f891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-nuxtjs-achernar-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b194872f9972ae698caaa2de3e7002b21ee196dca833bc5546eb8a1e729b361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-firebase-dotenv-parse-variables-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8bc64e640d9cd2b3a41882b58e530631f6762fcd827528fd2025ba8142320c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144939 Malicious code in meteor-start-aether-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9301d09568ade4960569bffbe5cb6360049a99677385189dd037333cb8cff6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...