Malicious code in spawn-kastra-got-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b681ac37012ca91d6377363d6e5a8296b01d4e42c7f49d917d4e368a0be7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-css-loader-metalsmith-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe2030d45e843d156fa16ca029b0f063d19d50a9ce988cc4c4a0fe0f2d6ac89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-release-it-carina-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912b65c20fbd5e2fe8d1a71298ca00870d815cd43e9e5cb9994d32666f2c406d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-warp-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbb3a25f9e7115cd8827ab56a1321c0f8f884a081a2f18d75c542301245404a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-javascript-update-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdafba81fa85aec8eb3d74a182a1360b3ed82de57bb6c85a9575ab328decd44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-nodemon-acamar-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8c7523b07c5d46134438bea9a859da7b275095ba7d6aa313e5e64977864977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-docusaurus-toml-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d64870398424d80f56358953b2ff20cee97a9699f8cf2d7e2002cabec852ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-cordelia-soap-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34db0d66276bb8d90455f75773ed99baf3815e2d4b00e53033c7a4c971e357c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-hercules-jwt-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614867d448239773695e3967c5731da29146f4ef3973888628f479856cd8eb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-build-callback-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74142340cf92817b9a0203a49ba9724c933d6186288a60aef7b071972cccd19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-puppeteer-bellatrix-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef1665bcc2a8ec8540f9a34906e1523c5f4d6eb99e68912b49f1c6758531391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-yakutsk-juno-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7d8857f1269646d020d61a230349856e619bec10f9307c2ab5843d8f509f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-blaze-pegasus-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67accb2c721894c9cc3ddef7520ceaba03aee1c6a0dd89bb3715b8912e8f2601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-auriga-inquirer-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316359bb885ba6987c0b0f397ef7bf1642c823b88557edd8f9928acd8596cb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-terser-rimraf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d5e223b4b4c03261bfd63d53ff1a3b4ca1f1283ff4b81775390e14a9925f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143050 Malicious code in gridsome-release-it-cluster-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141958 Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149379 Malicious code in webdriverio-pino-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca553956144a6de60b33e12b7d4ebf483c39d114fdef6305308ea3dea7c685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149576 Malicious code in writable-neptune-norma-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f525a38c1f7ae8c65e5357112ddb68d3345bc89693d22c219fab3879adf2349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...