Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-quantum-public-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f32f9ca1bb4dec77e4c7dfd7d93584f92b71a291ca7d219c1c986fa6a3f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f976666400c8581d9105dfe0fb7da5ae6fb7131a6b527569a93b206d34a4c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-husky-cosmos-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ebb451c9b23e274e850692c02cbc655f875c2f814390198c1adbc3705315c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-uglify-js-ophiuchus-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3763d689299b26c905a36ddfa3ea5740c798a3ebbf3ae26b8f4a1e4150c295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-dione-algol-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ef01a55cc9f252b9910c70276e19577b4b009d210eacfe3e5510edb24f8c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-postcss-loader-janus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9717f2f2ac452204d81ca2f4247e7b08e40a0486176508635e3a9a8711d883ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-webdriver-mocha-webdriver-mocha-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e5abf93e13670c0204d1213efaf2185a6c74e9b7579971752240918009cebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-dynamo-mongodb-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed148be798a96b98836a631013135b1e6c442560a85390172b4c430c0b27fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-zenobia-colors-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a618651c28211d58560b99c0f80a6c373c196235f384a81f13f6c7994f5ba7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-sedna-rest-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd8d5a7d225f8bcf97b5fbc42898687fda8150484ad69294c8d1fbdc15d1347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-nebula-sass-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3575dab522d0a71cd76a11b1ffb22109fe401d11239b6d29d146aa34faaf0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-webdriver-mocha-testcafe-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97be0264b0bb5094af68aea6b2b3948642428c9ca9efd84ddf15d7ab02acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-passport-eslint-config-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aebaca9d83597eaa315d6064a074b23ccc4564c49240edf92a50d5482b736c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-titan-andromeda-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db56ca2e1f597d46076e860c53c02a5d847424aeba44464086eb792744037e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-enceladus-pegasus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922dd32d2c25215ae03fc12f657554932a92be0caf2e526bdf50adbb6271baf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-subscription-configstore-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb66ff1c012081cd21030b4d61b73c3dc1b262d6a90182478c8a1d2c7813b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-scorpius-octans-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4011eaa486cbc130107b6c5b0293b7b15c8a0a58eb271ce30dfad67d434e3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...