Malicious code in global-browserify-pino-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ee931d298510e62cb53d15bbd3d6cc32caf1a15481f40bf9b5643428d3e073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-reveal-md-betelgeuse-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5353a675fc71a6f7979ed34bb601e42339f6f0c11956bee5628b60cfcb84881f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-axios-mongodb-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e173859d9255f417371855a249aef1961a30d39eda19f4b23ecc555ee150b732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-redis-janus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1dea7f3f27aa527a8b9b0aa5b85e5139ff9b1c78d2cf06d48c8841ca2c3ed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-hyperion-semantic-release-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf7059e4ac0020b941965c223d4c47377d71afc1a550f4172f95f30a36ac60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-postcss-carpo-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25f14bee0e8f72fb8310de841e4a0e25703322b37012c06a27f037259587e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-query-slidev-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cfed5132e8d320f4fb2fb99af73bb8777c499543b18594cfcbf201b4625eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-wezen-nconf-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971b1434499a9fbd6456451777a548f2b380dbfca4750fb5aa08b2389ffaf522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-ganymede-update-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2cd828ec2afd2cbdaa184beaa0bf885beeda1644bc1297bc3d9432898288fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-telesto-blitz-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0359ea68b09faa00aac058a15089f39984b19b71e3754ae36811855066c40239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-rigel-bulma-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10efe745ce9a8c5335e8fc1b7f9fdee45f7376be426c0b9e9774e91939f7c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-radiant-sagitta-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c84a0ab09a6df815a8eecabcebbc28db9b5288ca23e5fa3780ee9e790461910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-epimetheus-chariklo-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbe848b613b149556fc1e2da071bd0f0b9920973ce442185806e397d958f406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-release-it-delphinus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9723dac1015b770186c13a25fd43bc6378a218746a96c2afb664e0faf6941f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-soap-atlas-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa32ebdf6c7a36c0fbaa79db2bb78384213d5a5f64c6f78fc4f2811bc97f85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147087 Malicious code in readable-ophiuchus-heka-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52dd611f8a0d7676f559091a9d6c98ca521a5d23eccc14ab60309143fdfb3fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143271 Malicious code in hercules-bellatrix-electron-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bac72ecf776c1adf3747f46d0a9eec68e308972908ccd0b243c50ae647139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-hyperion-fornax-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e03baf6447776f6d27d28c510f76e3b0afd0f980a31042f178907116c3963b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...