Malicious code in remark-wolf-jwt-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd162f05a085a9bd6f3d5eae4eb71f22530b58420b2769e141f54389dd035c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-pm2-magellan-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f979d60e9f0321430741732ee1d0db5bcbeb4f5bea123aecf96de18fd502645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-less-loader-fusion-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8575a4ca4960c96b483a3c6d8f996eddabce2d7a28def93fc327e168cc7a1b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-ultra-process-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf421c8337829ccd7752197bb60c5b21fc674b453bfedc4a03db7644b960f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-elektra-test-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54feba1b0ea2f5045f52f560727f715820fe005c0b44599e9e1078f5ea1108b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-duplex-meissa-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c2f5605f67397ee5dbe46e63f07211ac8cccf32c5834fb4218299cc9736f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-schema-link-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18593dd2817888bcd25d940235adad8818ee1bc9559a873cac93d9ff7cec227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-server-grunt-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f767bb3ff31fa9ecd5cbd84e586ecf684b960f25ac9654339d7fad97c02d920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-fetch-flare-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4e98e20c61d5c173d509fd0efa7d781ac49aa4774424b9740703ed7156b521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-virgo-impulse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f7baa439a7ef55154ee9b9254ab2728fa7346ccf937a84ab806d616b5b3e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-node-sass-lint-staged-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9998636ea0a280ddec64a269b14991a32a187101be27f6e27765845c99e790bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-csv-middleware-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a90c0ed8d48568ce28902e224b77e7b8d7911333c8d1ab524cabdb671285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-alphard-mongodb-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95542288931cd3d5d462529f222d90c0fe40a687de3fd60c6d1dfbfe0ded262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-chakra-ui-delphinus-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f49181e79304a55829274d7b692031d27c57deb4690a3a3e3c7c977092f86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-bellatrix-cosmiconfig-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bfc0a9d123c2f0452947c5293ca68f12066d3aed35fc561a356882b87baba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cz-conventional-changelog-aquarius-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c86bdafd407c357b4e5f009e701e69157cd73df2a754c63ee12fddba5576de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147957 Malicious code in sirius-impulse-node-config-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90aec7674c1a5524fc2ea92edd26c3a9e2665afcaff60074fe96808a1fc7b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...