Malicious code in pm2-hyperion-mysql-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bd384abe5841ac7d284915b8d92b119b617ca2c97fed9c70af39192ed3887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-kastra-fomalhaut-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eef0a934d73d0ead1f154332245499d61fc033a2baefceef76b244aca28fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae26c88c181d9c55babee3d7420ebd9761f1cc23f179a381d9b81d8f747c8c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-reveal-md-react-bootstrap-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279aa0e60f46495584e2044891a57e17d52a3fa040efc26a9c9574b20e260df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-warp-mongodb-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06ae7d6ff6aabf0154b5632ee77933718e1f2d084a2c285b9fb72e9b2dcdbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-wezen-corvus-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760766f5a0d8b69d4b0a41207556460ffde2e2318ce46dab3cbaaac001a085ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-oberon-tailwindcss-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c4502aa3cf663ce3032721cb96acea46b65f80e204337edf55f20827f6328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-izar-resolvers-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a98268bc4d6827717267c3f7cb7dcdb135f6828102d3a638c513591381dff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-stream-achernar-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3f0aa00a06877ee792afc87c3c806b77a813807ca4ca6abb7f87513a020c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b1046da97d6e7c83170cac3d306570016cd8e3b7315de173d686eb7a2bd2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-quantum-andromeda-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd57197959c002bb3f2c34384d0d603abb5da34acfe5db2fadf10e630b6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-altair-carpo-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098ba0624983e816986795af3e5a8fbdfcc6ef8446ff26353af8a45c6ef0a8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-superagent-passport-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0230d14e2b4ea76e2119fa0b86c46d053d908cf42b18a75e56f3b15296d96fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-concurrently-release-it-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a3d550574f8a05abf6d282d8cf72319f5b6ce6dfd100ffbf7cb35777ee8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-gridsome-vega-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ae7c566eab25bc74e5af7d016f797ca509921a1608b9aa315acc4ac93808f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-release-it-markdown-pdf-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140949 Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139775 Malicious code in avior-materialize-arcturus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a0abe30ecfd362bbf43ba3c31f8f5360240afaf776b1fd268c9fe69ee0e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142052 Malicious code in enif-less-procyon-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959dbaf3cd4c9e9429acd747e88f46236bc6f84b85bbd2f3e3c72d8325c55465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...