Malicious code in stop-changelog-centauri-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc4dddb8925f9a970aa7c5687caf4439035af040dcd9f9d60675c26aaa27ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-neptune-cypress-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54e6388bb20dfa733fe482a48caca3c78e949fbdf6a6d8da8a805bcd5e528f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-grus-cross-env-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0088893a97fa72af405080a5377eec93ec689ed41ab62249ed9e0bd9265bff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-pipe-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442e56feb45790e8c8f63b2efb8281db7566c164250bc9f04efe45622367d75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-comet-dotenv-safe-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba749e3d74862f13eaabb12c70193eeac434a7647c0bae4281bc4536eaacc4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-rollup-vortex-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 879d4bebf6a8e3dcc6d1eecab6d437474700c1c4af14a5b05bd75267fbcd6146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147935 Malicious code in sirius-antares-quito-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb14f1e0ab037152d92b6e9a004a7710057e78b13dea45ab58a2b501256a79aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149110 Malicious code in venus-exec-sagitta-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5652eb806bf9840e686042adc13f54c667dff2f510804fbdd19f2eaa4763379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-css-minimizer-webpack-plugin-gulp-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca1fd93296551c523ea41407b98ea746afe18e970e55e894d1f83b0eaa59303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144576 Malicious code in luna-pegasus-nconf-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fa455b2059614d207d686005cf0890c87f2061d148044477b6e8eafff85443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140228 Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146983 Malicious code in query-webdriver-manager-writable-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912021368ecb1501d6500bc85aa33d7f26dd016c69d92182789f990c2a475792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149526 Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-mongodb-subscription-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5b2015321ec71099b04e8f074d8bc7d0d19b06c3f2ed847d2983a3b28fa945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-neptune-fetch-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb24c5d3b535a0b5cce2ce3b89a0d36c4c30e0fdd5322f5b0ca38d84d577bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-lint-altair-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd67e9b012ad5296821bec49dbaacc8d0ba854d8356cd572e855d31cd9bcd94f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-umbra-achernar-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfccc064fd329dd2cdac358fcc4e424a92bc45e143066d8dd5c6ff834c8a6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...