Malicious code in upgrade-vuepress-pm2-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4aa83789c0e6a054547a1cf51bf16cf72c40d7b36e6ff05521271570800e1be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-nightwatch-auriga-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ea1f1546d21c3f5b13122ea4150fdcc0800fceb20f7bc5ea7689a4a9b2cbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-rate-limiter-hermes-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ed5470b13fef8da440abc68f510f271994401493afb95ea428c871fd94bd3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-jest-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-resolvers-wolf-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdda468c3c4eda1b3e817b7c9c443f941a69386c43821d28297ffaa4924b918b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-izar-meteor-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bbaa8857adffc1887054498110d02d4405e7640cce3cc16b238ec53cc5f0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-hermes-epimetheus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b612fe95675cbb0a0e6f234cde2ea648298bae877b8ce1e7502504f603be40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-stop-fork-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8f85fd8655a595a472edf9de22c502004bf3992a2e1d4e481ca097860e48ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-despina-spectron-webdriver-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcae3f6d4ea7e4a93214a5c60527bce4d58171d663259f9c538861ab6ebe971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-nodemon-start-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c515778dd4b1e45430397088ea10ba38f578baaa4025eff0908a9a5190565cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-superagent-enif-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f582d1fcc8b43d9206c0d7ff651f4fd9297da9b6c8bfcd5c44adbf762e6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e5940c3692e0184723af4b60b6ab2fc2f47716e729018664d180a463eb807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-prompts-hercules-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a51660212c8f8e17ba061c5d3c1287bece955ade4374abc8c6d27c3156ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-nashira-command-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2759382bc8889aa98110e33c7872c4ddf1f73bdfd15d8b24712a94a12d0d9d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-aldebaran-eslint-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b3d94674faa2d791badc098c041f3b61d7592d45cedc12a36f44ce3b39077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148510 Malicious code in terser-auth-axios-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ca9de95c4d2f1954696851df6eeb56a9ab45bd6ca6f020331f31b003c67e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140638 Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147844 Malicious code in semantic-ui-dione-graphql-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53702f4357ae4812cdd90f852efcc1e208cdb37c1d724570bfc11046a3a0dfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141741 Malicious code in dotenv-prettier-stylelint-fomalhaut-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01eecc8d6d6c5192375f6d7c144b12829b9f62cc06724afc12c149fec2352b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...