Malicious code in tool-pino-xenos-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d08fe06f64a30975c203a857a87ca23f3ddae2ca1e75508202c57616eece815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-supervisor-relay-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a26f63e49cfb5c2e768202d61487c55e9c1f08c139bc67fda8a39c99da2c5ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-janus-soap-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0748be6aaa678054ffec1227c9412d1378a7a4ce501ac61fd6eab94006e013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186069 Malicious code in centaurus-triton-library-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508d04582683b1a2b69f84330b530a99d086493e9e8e58e18c5c504817462a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187700 Malicious code in koa-higgs-jasmine-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94744e4363382314160fd2c7e5b498755be2a10ae9e8fa7b684813a28d90a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-javascript-pulsar-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e42433738cc5a2accb6a2b35a72082ee4ac69aa8f58a357c9658e5819a94fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189778 Malicious code in supervisor-config-hapi-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-ethology-cordelia-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18524f8a4185f881f243daf29ab7f4540519e31f88063d8df886042a8f651320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seismology-configstore-vuepress-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26424646d56af68a8890c1e7febcf12c53e4f2f2688c342789d899c5cd8b8d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nu-interpret-container-grep-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fcf0f0b56c9bcce303f3f0b00cd434d5f276b06967ac7541976361325bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-corvus-janus-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068cd6224c2679afa1600ed26617858272747c6b62a13b0ecf5889b1339f36ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in debug-tau-wind-gamma-sun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582520f95fbf0e1692946045a6fba130b71d303856ba7dde1b89b2b426d30d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-ignite-graphql-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3ee76870be82d97f3eb5d63d5d9fc0339e9009a28b02be76c1b4a0f44944d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-nconf-docusaurus-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e372bcd590d5a3c84d04776d2d75c70dbaafb5b84fc80e7175926fce4f9bb7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-dotenv-safe-oberon-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e05545b4c2052a90e9017e988b2a71db55dbfd8788af2c5cccbf3cc164426f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-sudo-notify-meta-orchestrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a621f4890e260b07bae44ac3d0fe50d6d1706970159cbdf42368fb889fbe1745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-vega-ceres-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60cb3d1a52c671cd3eef17746e2ab0fefaecdac1fae0661779f46f570219be67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-test-betelgeuse-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8c54d1cf82e48e21e0919c55c28945ae75a22c803ff46452fbae803bdfe1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grid-mu-cloud-signal-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cdea576c0cd2686520489649051a2de7c88148b728550acd1d2f5516422c9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tau-float-string-reject-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f892c15a0fe0c03ddd87d3d7e78aa84b5bf8f943daefb2a16fe2421b23957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...