Malicious code in node-config-commitlint-element-ui-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a3d65597b1872dce212f078d80bd723a120e7a0170a87d2d02ddbceaa1b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-rocket-nightwatch-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c1a7ce21f97d1a465c17c98b1da1fb0548bcc5ac605c81f2286030ac4390e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-fork-aldebaran-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108e364c3a72ba84354e451e03216e5cfc26e6c2e5e436f26055b6f868d5a0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-fusion-chariklo-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99b8a29edbf68f38fa93c36114a7188b726f9e453a14c9ec6da28db44f7f94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-quantum-eslint-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5583c09e585f89c6e70686d3b73554e679f9f23c2d3be27d0f2939bbfee84334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-xo-supervisor-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a1be4297ae91e7c9f380f7cda1d94309794c765c1723339327d6d7ab5c587e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-tool-fornax-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f8bd622c042375df8054a2714cc5559b394b0284100a27f4096c2744dab285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-flare-delphinus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956297c6f1c0ace19000d0b1b21712bf30dc8a296ad24a20dd6af80560aee5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-prompts-node-config-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9728734a942a533c415e6987fd3fa55102d80f96c4b586d9acd545f101f9cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-sedna-nextjs-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e307a27a7c1667b7b33c2efac98354eefe51925d335545339cebbe0277a3aa8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-apex-docusaurus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc98a74a3af4e2a01d84572d7920f29b7b94965c15aa269833d16a77ea18044d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-magellan-server-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f2acec02551e19c519fb08429a857027f87ac2d9ae888c056fe99dc5cc9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-chromedriver-typeorm-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65121db18f2f842924287b69d612aae8a58a24bd12897bdb16520e989bedfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-antares-altair-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1dd19c2038ff973dd2b4ea0902b25852272ab1db03e4ddefba38fd37d87ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139751 Malicious code in auth0-markdown-pdf-jovian-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a5d051ed94e1c11e66965e997986b3294338b4d7ffffc9246f8156b5ac1adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143316 Malicious code in hermes-enceladus-commitizen-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f766d5ff337f93d816e6e76ebadb6d46154771716ce960f02b416fb7c476ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...