Malicious code in carina-eslint-plugin-async-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c48ce8ba7d435958b6830b6a8a7fe21a24780cd82d392645324548f91b988f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-resolvers-helmet-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75ee7fb75d478c231be298854de00c4baf6a337165fdbe78ed46807ae66605f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-ganymede-native-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f9e981e62d594dce3c76d2f3f1e4089d7417c37b7e7968a8afa7284894b681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-cygnus-jekyll-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d56357dfa0ac076323f03bdeebf831e2d26e0d2bdc4593b4bb80413934d847d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-jsonp-rimraf-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f43282474b34da1bf6211270b82aabb48e6a51ed00ecef30170b32a906b9ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-json-buffer-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-jovian-husky-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24159d35cd206dc42cb00bd266437465efeecc6083e43f4257bb6abf407b3b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-await-version-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f608d03904ce391a31e1745e07a7286e0aa14a3f140be9fe5f87ff7ce07c8bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-rimraf-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4450723988fdc9934497f256eda5cf0448f684ee13edc2559145f61689bf8886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-blaze-airbnb-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38969f667ef862cafbec8067822a7b84c1f7bfce91e5eba9a51ce5e997bfbe22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-scripts-centauri-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d6970faf99b83ae311edec97fcaf1798e64543b4e2f79f1a7ef54c0e6f1d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-standard-rest-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106eb1a1e61fd11a05d8de1fe363d28f115065bf4e220f6c38373f9776c875d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-rest-yildun-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd93457911583a80de21e9b21451295f65c77d6d419c0b90cb170b23720d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-spica-leda-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8cecac1c1179d9823b5417fb59873c0562de62cc50e700c3015893a3f59ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-cypress-barnard-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102adc00966ba285ca48a5b0c9ef6bedbd9b1c15e55c5c56f7a6b132206d191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-quito-standard-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac7c67bdb9d75c8e52475a01bcf3c355fc48b9d404756db73080de59a1c46ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149178 Malicious code in vortex-antares-axios-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496fdcd645392ce1ce737d33cd2884aa6941d8a60e4abc6055eabb6cb9fb6e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139422 Malicious code in antares-mysql-gacrux-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edba824e6fe768f08d584a55a0dd42859273e51438ddde244b1179c175b38396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...