Malicious code in gacrux-sedna-nextjs-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e307a27a7c1667b7b33c2efac98354eefe51925d335545339cebbe0277a3aa8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-eslint-plugin-google-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1a1bbe19c10c90b8a467eb1130aba1a148edc3bb3b8ea42919a5377f413741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-command-lyra-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599182e18ffd8a86cfa7e3f6b6279704d15e1d14f57cc865232a8d1b6d06cbe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-less-bulma-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbe8e09124fc0caecfd47bbc91cb65955ecf81b13e15dc173f1d939c9e620e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-yildun-canopus-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b3f8d183c6a4f0b316edb71ecd07c53680a4f679faaaae50a2e104ed9b1332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-fork-aldebaran-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108e364c3a72ba84354e451e03216e5cfc26e6c2e5e436f26055b6f868d5a0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-orbit-dynamo-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca30097d082087dd40ce6bece08a2fe444de12b0eb30b4dfcb180ae3be49a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-exec-foundation-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393418d75ebc2f776c24e86203957211190acf17666ab3c9cfeea66c745b963f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-unuk-helios-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4494f554296131e81f71e10c287e9872f5e5f8d04ec26052b06527d853f2d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-package-grus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669f966093aa106ff43ac0e966f583d676203df8eb2a44bd0e4e4f2d307d193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147495 Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-phenomic-uninstall-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65efd88af0ad0e19aaa51594495daaf09c8f860e4679abb776dab88ae7805818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-polaris-umbriel-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06219bbded3881721c3e959ced64cfc307b212d788ccb4e83daffbd8a6be1524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-apex-docusaurus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc98a74a3af4e2a01d84572d7920f29b7b94965c15aa269833d16a77ea18044d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-chakra-ui-delphinus-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f49181e79304a55829274d7b692031d27c57deb4690a3a3e3c7c977092f86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-sync-global-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-sass-loader-pegasus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91affc7f9bb256fde82c4268b20d43912ffe30773a0fae9ed34039f4e000131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-loop-module-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86ea94a77cb0553e830c53e35a9681d968d5df4e3cb1286d1736152b291533c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-winston-rollup-plugin-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920b0a97c6f918e65d1ce8ace558061566f0a81e894ccd0dcee9efe5219f57e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...