Malicious code in sagitta-chariklo-neptune-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5567eaf05d0f398650b7487da7dc6b9f7140514798f1542595b71d792c39c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-less-pino-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5142e8f25eb8cb84522138e3c98a5822cfca19eed6ff6a0b8f0608fa00c1687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-sadr-writable-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb8b258bbdf29a084af144b6809ac0622d165c66c346247925341cadc3c9bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-fetch-corvus-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1033edc9f74841360f05c0f9c2f6b62133e43f267042e802c53f48e1b302043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-corvus-bunyan-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5e35c4ae9f8c181512f92e13b544405cdeba2a3e82a7feec814e7daa456142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-bellatrix-polaris-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0332c27cc5eaed2686c971201590aa7f14bc67ea3b5004f6f6a1d5b9f1ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-process-socketio-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc94a69e8db13868ea7b35d2460be71bc2242a9b526364d04b255093dc4a7037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-element-ui-apollo-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df498ac200d33b3658c343435b76d30ef4636d8e58ef7ef5f2623064879b17aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-webdriverio-xerxes-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46c7044db02697faa91ea47e9e00a9fe04e7e7215ebd93e223558d8c16fd72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-style-loader-miranda-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7adc4b81369d78be0c306888de6a7958b95cae36dee66b5bebf086605344d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-dione-playwright-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2acf1752fd78aafaacb9786f57344172402c394a983d209ea714bb25c15b5cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-gravity-cache-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb48ae50821c55007a4579308b3d0c1e0ab08fef7b5c78d81a107f08d1b8512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-xenon-arcturus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5240b3ede1f9201b1acc524faa01c01e3c11b02638005b3793905ffd25a4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-nconf-halley-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99eeea22776023a893b8e4b2d65a89134787e4071cffb487c1afea58bac1525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-release-it-pyxis-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61773a0ece38bef11fd9b5fb4ad27ba85fae3abf3dcd63868c9fabccbc105b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-tailwindcss-helmet-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8d7941f34ed14c6cb23f0f0ec0dec198e240f770b1788b17d88201f1fb16b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142143 Malicious code in eridanus-enif-magellan-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331943ffdd59f01e95a50e5636e55548545e02516da2eb72c82b493f12e8a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147394 Malicious code in restart-quark-fusion-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...