Malicious code in mongoose-electron-bunyan-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ed494efd702fa86dbb4eb80c161c3843775d08315479692bccbcbd4c8864b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-capella-auth0-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73e61530abddf10af54e4b3e7e468fb6e763ffe1f4059aec6a0de811685b393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiverse-perseus-ignite-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2dc25fda56b320b22f7aaa8af3bf5680fb5d97128cb6cfe22f2435a8dfc067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176485

Malicious code in scripts-private-frontend-fornax npm...

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e2cf5e995e7be6217368c91ec8ecf853022838cc7a763cbcc73d49e0c23b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177050

Malicious code in private-dorado-grunt-jupiter npm...

Malicious code in chariklo-perseus-chalk-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5338c7a76846e68332ded14ff77f20bddae227a163e5be26d6aa6cf4ef5eb266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-sass-loader-release-it-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c153eb6fd6cc614dab9d8fd43c3d5a0e5258e9ae6ddd573ad103e2a78cdf4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technocracy-protoplanetarydisk-xanthus-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500dd7d62fdae022c87c95e3d1696430225ac3b8b2ce7eb189361de65a02fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133334c5bcc682926745fc752255a3c1e4da48e8c1e07925a14d0f505ea7526d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-request-hyperion-subduction (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805221cf5a62588c1c2a9e61e0875d0fc1e09945259c7a29162ba921752675b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-buffer-sequelize-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b662cd60cd555d9bacb27298d83489c90bb2da7c8889ef66f142b25ac4c91cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-got-norma-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a9d6a0685ce9363d32e79a51120d0b4ca86288e24249fa2720d35d762a0c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stratigraphy-archaeogenetics-pino-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8b8215edc8d75314fd70706553211c18d60e357ddd2ba33d98c9aebc7bfc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-electron-builder-hexo-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5d47802b8a769e0ea86cd6148627590767a58264b4e864bebfe3ea812c60b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pi-permission-debug-decrypt-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5c1bf367491410286451ab21baf104a98df99d7b9f34fa9d30dc0a465f276c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heliophysics-blackhole-ganymede-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c754beabdfebaf0f6366763fde491cf5889feefdb7cf3b0a5c5d5bf89f812cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-on-oscillation-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ca9d06180b7ce0f8167aa6796479c6ce559c18461c3ecc78a266ab88af199d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-oortcloud-void-volcanology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396cae3cf577124eba1d39303feb623fb7e9edec9a55138cb0b465ac4dc20d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...