Malicious code in chalk-ganymede-delphinus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8e49b226e129d43087e9bd1e75e9d3b24a46a2df28a813885bfe994d28e183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-rigel-xenos-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea682a7772329c2722aec8ab0885f3f2680f15f20afa3d09c05cd2b909698d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-astro-sirius-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cb87dd0f0cd51c19f01a21a145760bebc9a3e39e9fa193ece9d01ea33fb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-ganymede-gravity-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55074460638b56fb91149c55951881aaa11a024c8c662b43283932a47287fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-astro-vega-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10c82d00e8a5538839fd2d88a2791336d181d786648d659cb9956bcb6e7f93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-polaris-init-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c0db221a3ed1a1d284e3d0174535f98041c9d5fee2a0576d99d4514895fa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-postcss-dependencies-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323392ca38cfedc4da56f983f855457eb4db40ebfc12a16fcb2918fafdef571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-axios-non-blocking-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbee5fadaf6ed789654e76109cf581a06d018aac66e2532a4b895782f3fe928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-tailwindcss-sqlite-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad336a787df0feade095708c35cc19985da02e0ca85730947baacf7b25f7ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-hermes-link-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56dd7db28ba880a2179e9749b736e9768d8e28b8bdb77f52b4ef58a323583ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-child-process-mongodb-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0521d8f1c77a106749e2b261ebae8d051bf9972ef5fdf1cef5a35bda7c0dae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-electron-taurus-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3501f859a05328b94c7db37388565d928c8afc4f855f8c268ad98bef89a627ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-development-avior-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6100a1aca3472a8e1da2302a8ac42b4ea6b7790af85fb94874b2750fd4e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-xenon-husky-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2a7df4b09fff550a251e285967e6054842adc3f6ef0bdd2efb2c4b646cf43c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-europa-publish-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a09bc38436786092d99a19e3bf9e0d03927398fd2aeb6347409e17722db57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144491 Malicious code in local-odin-sync-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d6eaad6abfc7da0b2db8e0aa9cb3812e19c577a9687e15a1f993dc96e8488b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-miranda-scripts-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0edd1f1aeb6d56a2e9830a51d80927d72aa295e7e75670337818f6d28d1f6dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-transport-cosmiconfig-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45cf4df27212407a86e893de712b869f4fa77619b9434172c885e2cc945f07e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-sirius-proxima-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd3f78f5cdd8c01a25adeca745497990e214ea544a47efc4370974b71923249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...