Malicious code in spawn-sirius-venus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4135237922c194529580f1e2d58a8ea86cfeaeafd6f22e5821f21fc7240da818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-quasar-karma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bd1d7f7c51f15d3c5b88398a4e2058f55838b7246fa1831d0b7db9807ea141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-pegasus-janus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f22985f2d8877c984e1d165dd6767a367d4f5c8488e58828bd17fdbb35bdb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-aquarius-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a3ba18460fa574edc9d017beb864f9c2393908814fc53a05638effd130fb01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-passport-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1c96bbd01bc353cd4d6dd7efc63eb0ebf5878a52296eae35df15e5308f6326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-europa-norma-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a1fc6ccad57d3555ce37c8d74db61a1de6b6ebf80c58455ad362ba65edf829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-pegasus-nightwatch-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80191c082be44691a67ad5ff841fed6a08ac9ffa96a49ed27afc0eb1c8dc50eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-ophiuchus-titan-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73dc8d4a86a67b4ccc329b5e21837fc317a5cb31232c045ac74f4919bf281f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-loglevel-rimraf-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07c7fb0a5770c3f5d2b17d7e71e72830405797fe2e6c21f13596cba7bd9a769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-json-terser-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1dfa0a2a56bfd1fc9b3bb79d785fa3baca5f6202ba425c8090df01719d5a098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcb4c250a746096bf08c2614533edd41b7fc959a5b0076e9c614a1a1be597a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-mui-browserify-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61120ae6dbcb0cc1e09d9cf55a21fa1f2d4cbdab17b808bfbb25c345a0ac7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-gemini-dynamo-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1bdc39e71993ae6d741b21d22ae1613981301b1e893586be8ea752ecea3ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-start-husky-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0712137e87ca31bb76b274c076a97cafc8f641b51e58e58d7f08ac05db42ee91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-webdriver-manager-tailwindcss-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20488f7b96c14a7d14e0afc2ebb7f50a71666b0fa8b83d4f4b59ade06ed380fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-public-odin-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce472fcd23ac14edaae98c960946771deefffb77efc0bd59c1726b2b080d0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-terser-configstore-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18813c3e1ff9705d5e8cc26b5c1dbbcfc10f8bda51eec707edc856eeba57da51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-json-spectron-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786bd9bd9011a5a9ed2776957a9967d5e46fcb7499fc2695fcb8bc16f9045b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe0ed93a195f1e90b9597a17f9ae38aa7a191ea284524761064ec0713b9439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140140 Malicious code in browserify-readable-mysql-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc48c23beb6dca987010f9cde20f17059008b360afeca9729396198f89faa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...