Malicious code in axios-taurus-dependencies-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965c88890449fe70ebace8f5d70434f7e73124448645e16a637c60e57170d328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-triton-query-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fe942855422456b2b094db1bd45bdae5ec15bfecb41962f6257d1a0d834689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-materialize-spawn-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28ddee9609b9433096caeb55f295ce863268d022ae96020a82ded6c378993b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-fomalhaut-lint-staged-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb105ce95665918097d4d61401177afe8ca59a34d9f9753e8c40e94ae07b8d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-delphinus-farout-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f370a395c2d47ea909b67d7db2433dbcdc997442f2a384b050ea0c2e241a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141058 Malicious code in configstore-markdown-convict-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27545746f4c3e9130cde3a5dbb4003c04061195eb37b9546b96683d306d649c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146110 Malicious code in perseus-redis-comet-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497bc20d603aaea85b8f83df64e5c610dc51c3976e7be90479ea9df604aa6095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146260 Malicious code in pipe-cygnus-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26599798d1f508b4a74bcc9c1d87ad759a3e61e6ede05b60fa179cf208d6651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-hermes-fornax-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e987d54b096a7726f59505fb5fdf043aa1936601415eb013eb1bc52ad13ba607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-jwt-soap-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ba016402a8e1f026cecd68e7a2e6cd6724f0a32d050b391c7016e08c40022a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-sagitta-mui-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb085ce71feb6c66240d4895529a244af49df4f259aa4e0385417f3e708524a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-registry-less-loader-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721081aa1d483891bbd09014143becd91e4a4aad2f1cf9b6a947fcdc5e8bfe16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149084 Malicious code in vega-bootstrap-barnard-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df34bfa4f9162dfd543970ac40778bdbf4311d1bf4d0e034d87cf32d5e11e027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-avior-hugo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839196d865170098006bfe73c2f0b712556ad1866d1fe766fff1604973367032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139715 Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-winston-json-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7ced402c9f3523ed686f438c023726ebfd93a97fbcf9f8146d5a2d75988d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-procyon-non-blocking-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd19d7ef615107e73bf38b274c493a453d37f8f166ba1a0fbd790637833e3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...