Malicious code in breezy-crimson-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3875b560289ee53cd714075de6f50623325d7fec152a2d1a0035da53e9289f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140260 Malicious code in busy-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb4341930456fcf26d397acec623f247a6d26b093fae7f227c7c4de79da790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-process-upgrade-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcacfcd1bbd599c7b477fbb83b87e5597330be03b33f25c13ac31109805ad32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-iota-hyperion-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98c520b0171c46afb33078873f06fd90640fa07e9795e8262bd23f12c992a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-elektra-tethys-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd6a416be129d48542f77dac831defe147dcb7b21c8048a07c1b70bcabd3b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-xenon-promise-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531649ee99419507b8cc2fa55207d2d7bc6a4b7209778bf70a24fdd8fc5b8430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-javascript-fork-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31d8ef523f64895d99cdf3b37549e07b7ff03de07b73488c2b778f8569fd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-lynx-astro-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd46b3c1de7c1784a8817620ce930feb00336a3a0fe9bc8c24e890ad623ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-polaris-sass-loader-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac4872e3209b7e770135a6ad29adbac00c7d4f90525555a0e3aeb4fb833a1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-helmet-markdownlint-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dd146f8b14178ac1a675fc49a5c08c881775ce18fd6b985c364ac18b26bbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-meissa-electron-builder-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c5ab002ce179a55f0a3e800837dcb74582c94b814ef5bca6c96140113755f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-ultra-spinner-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4385603b947c7397e51d58aac7d7b05374d2f684bdcdbcdce3dfbe0deecd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-nashira-impulse-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b0b4d4104a70379c8e783627e3eae92fe1b8c157085a842055a52cf59fafc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-electron-builder-arcturus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a89d2d72c450e8537ac1c28fde5acfb85995789697e16a6b4793a011ce5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-hercules-prettier-stylelint-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de94077beec0f658f2376273e3937aaf74f02106107d2330e2ef39e87bfff2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-procyon-promise-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd32db1e172bcaef32471225d0238324fae546aac899d0d778a7be7bbea29aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-shelljs-rate-limiter-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3dc1868def93642482dc1cde7445a3203c79d579a7682f4e895658766993e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-barnard-galaxy-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59049d351727bffb49a3667c44626a812f06adf443b2fdef5596e01172355a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...