Malicious code in bellatrix-mira-europa-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cab7ef498b6c313eb54c4a5697005ba951837a2e208cffa2b5687efad2360c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-prompts-fusion-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a369d5bd92a84f0b2a7db8c2040c883f375e842eb37e42b4aeac8b102ff0f006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-scorpius-dotenv-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a54165db7da361334553c966eb5152e75555cd344fc44c637a633e938c7a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-sedna-sedna-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69eddaae3c39a32407655f5a4a6db2137f9f60b9ad3397f4708efc948e94aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-sass-loader-webpack-quantum-computing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245ef4ee7065bdec8a11c9aee3fc8b289af5ac01fda869072a7d09d22217380b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03253bd76fedc24d55504b970d032ee47ad508a341ba8a5531490b0b9ae15ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-australis-quito-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f23afb76dd834950908db36270f132db3d2309a7d62c3f676096e347dfccdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-backend-altair-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35756d40a25a4bdb4052a566e3b66b63592849244ddafa63fe0a0df31a150e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-rollup-plugin-carina-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bf9fcb09e12feb0d27fb4d36e938ec6bb40361ec9a2ab7c9eafbc28e56ebb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-tachyon-geochronology-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c5712385fa129477281e98cbc714546f1b33bda214810ca0805130a57eb58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-octans-taurus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08a561f7cad6fc8181a710ccbe3dc3c4893aba23442b6399408165dc7bee9f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in index-grid-unix-long-kappa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd6010b07fa983c3e40a12dd19c6d425704d8d363446d1557f67e28cbcc8d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sed-sigma-encrypt-catch-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a860b00b4fea2a38153d850c754e694e0ac14cc6a8bac156ef5bef91fa4290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-biotechnology-meteor-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7007c2c8f13c28e4f7207166e71ebaf1dd15e71fd1b55b1f8686c74a636216bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orchestrate-benchmark-spy-air-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56af31331b9ffa6f4682de3912e008b7d3a51a1271eed1dcaea6e041c7d9c7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thread-simulate-meta-small-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194fdfa3021ecd0ad01a51221e712454a6877d5e7754aa0208e2a6f1c908ffa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185397 Malicious code in aether-start-lepton-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36aedbc551c0fdb6d6a164bc853c5330db99a2f5ebdc2bd7c415435ac4acf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190041 Malicious code in umbra-octans-ablation-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8978bd923183b2f8c2adeb260b1beacf5596db8503a689fa02d4d665279a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189407 Malicious code in sed-sigma-mock-finally-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0a41fd08cfcc94af80445f4cbcacf1f1a3025d1f4d341f2ade3f5e5609b5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189811 Malicious code in tardigrade-mini-css-extract-plugin-nightwatch-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccd2dbe37050ec44770db072262af063d90c8cbb1f901cc4ab7337d91745c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...