Malicious code in capella-wolf-testcafe-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295c79a4035522fd16a4d1ae5bc9c674fe03ec774676b7dce77dfea5c68238c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-redis-bootes-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab3da84f1a9164a7140d015597595bd0fbd9955000801582a5e659863835325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-apex-writable-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfdc92c35108b7bac99e9f035fd519cc20125241b0a253c8541000e44936d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-auth-fusion-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c74e6c4177a2be27c16708c819a8e4889de935df4620a23f9b07e19498a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-nightwatch-auriga-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ea1f1546d21c3f5b13122ea4150fdcc0800fceb20f7bc5ea7689a4a9b2cbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-warp-markdownlint-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b18dfe08f8107037841d2caef366d4f4b18d08ebefee595d3ffcf27fdd1a5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-neptune-eslint-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c4f096543a30ee5960737681cf9b3aa1939dc04aebef1c0ef66fe0b9706477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7bd00c7ac28604a872f9aec913094464d5a6717e2f388f33e390d88a8f4360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-markdown-pdf-sirius-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc930c5822a7bbf58c6f7f984bf76daf2b51adf0233ea6467e01ce03a493ea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-hapi-init-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a589dd8251f7b312b8b946a84cf1993ef7cfbe4e05c8ccb269fd98890e23d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-dependencies-restart-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84afbb88c014567ce635de5bd2f5f6ef18ad0d1ea7dc744aeab38c3484ada01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b5d940e6adbde6832d8047a00e567ddc3ddc6310eb5cb88dabddaa419b8ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-publish-algol-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7566a3cbb5bac2b16d724843e2eff719ebf48475bef2fd16561b7d5bb7ca51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-hermes-jovian-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f575ed011ba9abd16d381f3446768c3a2dd8a2a7158234bc708e00b833f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-aether-rocket-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d35c84ccd5965f07d33d6f6f051c93ea065866d5b4ceea168037f7d7a05ff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-rate-limiter-hermes-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ed5470b13fef8da440abc68f510f271994401493afb95ea428c871fd94bd3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147598 Malicious code in sagitta-helmet-vuepress-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a0f227ecf5dbd238bdb4fdf614d28c9f11da0fb859e447e77910ac1e113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...