Malicious code in pm2-xerxes-luna-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-enceladus-docusaurus-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32a8b621e280e6ae91766209b9334a5f2c7e13d65c8e87032acf79b65bdbbab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-stream-toml-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ecdbed3d1f61979e80b7310790181fbfae8d2f3d11f3eea7493acce573c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-cli-ariel-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cafe7413479fb9fed550e2556cbdbe777ac1cf62089cac36a45b27a23e59ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-ini-puppeteer-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86d35a713bef02da5c1926e23331bb6bc7c3f7fc1af3b86a3504773d862e7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-csrf-jsonp-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e8430dc5c129cdb2b246c95ed2efc76f44ac2df52fa48247c0b286701cc854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-materialize-gacrux-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04dacc6ff30833881570a7da8a7ba446d6cbc825fab5976981a25c337a0ddfb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-pino-pretty-command-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce119a64f69bf04c213d4d6ae4eb4186c8268e2283415e92a5a68319226bb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-betelgeuse-chromedriver-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785b2087930ad8e2ee5993e91cbb9bba94acf15a486098752d583811cb48e951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-frontend-toml-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf77bba0885f150e6e4f84b84c43c446109c22577967bb4298dd8ba4cb9186b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-oberon-framework-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5717df4094340a3b32dc4b99bc68bf22c3d181bc748aa862add6b2fd0f2165f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-eris-sadr-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbedbf2b4ed44d816ed2a9def1a28eea2d4b80782ec0d6f39460e743a2a8de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-version-wolf-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f69a9086862655d20f6380f2c35b0ee7d3c426cdfdbd882de75490dd08a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-jabbah-dotenv-safe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8a3cff783e8ce4ca144f5365873cb4fe15073ac53fe9fa26f546b053cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-hermes-lacerta-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79996a3e99ecc6f49fcc9fe9b797330b934a6a4067b96327cd37fb554aefc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146441 Malicious code in postgres-neptune-start-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e313b6f9d33429c95c9c1d346a82c5c092d01bd5405df768c5b3ce038bb232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-procyon-nconf-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb8ed7e951c9b0f86612e0b9e2242fcd5a8ecb02d367f9d376cd3d3dfeada6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142071 Malicious code in envconfig-cosmos-zenith-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa97e6501b45136b084dc62af1e48cf36e346f9434b93fb93087c77e5bb0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...