Malicious code in bootes-install-impulse-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00721d1e761c857e566783cfc81bcc0e6ad51ebe3a2394924a68755be13da065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146680 Malicious code in protractor-dactyl-nightmare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25eb547f2c0710a4ca734107b39b3538297761f961c0a01fdf10bf7fd50975a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139298 Malicious code in algol-local-cordelia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4804f6c26a015c218ee4af9c94f675e49eb8f5d5bcad94949493daae11d0962a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147061 Malicious code in react-bootstrap-hyperion-gemini-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1223a8fe17c4091ebca85d8c9ec163e07248fb1c3978935ed1eed44557b75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149620 Malicious code in xanthus-colors-umbriel-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816e1c6b313dd8cc06efc8b2eb7332f267ca478a69bbcd2965f31859ce9b0887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141734 Malicious code in dotenv-parse-variables-proxima-mongodb-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971d4e3c75caba63c864868b49bfebd4f37e76c926e7cf9ebe3439219e30418c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-andromeda-phoebe-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d09196c4b90b3a84cf7add48bfe8e3cb2279e49e087e3e677594151a90cf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-pegasus-odin-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5eafa0494d823d7d10a713b9c3cde8e4e9386a1dd4780a78567fbe9315140e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-orbit-bootes-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2f3aee0366b8961da6c68fcdf85a8a959fc9725a26442353bb2f5b173161e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-titan-dotenv-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc1b1f0d86e23bdcb14c99f809d2b93e7ab46cc2608e1c4bb0bf300f6d8aeb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-yonder-mdx-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a05bd12471c26111582fb880b7b86a83151e218c40d900842b30e9e5b6c8b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-elektra-query-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500f63431257f1c06eeb57bdf809169a3a833961b9df76c544c642bbf00efdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-blitz-radiant-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4348baf1f1458216d94dd1f309511cfbf0fdf3a496164b285479c6cfe65ca185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-ignite-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-jupiter-indus-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e140f9348d1ed745a5a6d1c04a6641eb654cdc38b580dd2bde82c9858ca31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-child-process-passport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd74c22d0aeaa7681ed0d073575724c68f031589b73e3a31bcdcc4eea9ef361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-meteor-pegasus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fa9c9bc7d00cb76bf4363eeb00bf670efaa50798ea6e6eb8f5a516d613d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-configstore-sirius-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89652821e865f568b1d8439feedbf080785e427885c6c6dd0d0cf76b0115d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-electron-builder-deimos-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded8816b3138afd92a583e68ad329661c85d0f0fc367f75c757032f1eaf21546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...