Malicious code in cli-quantum-graphql-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c34e4b2d30dd543ede618927dae46a55b153b44a3735d4cc905a98f4652f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-registry-zephyr-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc9f5a910bf6a3327db62a09076f22baa763c53b2d208d4c955df802849b440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-pavo-taurus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15061f0cc0e121caaff0c51e817e1426d95c40b7d140db63c1f74c738cea90d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-subscription-heka-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3980fdce10741215a5b28c7a31b64d573e8ba28e502d529a090a5b21044aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-unuk-weywot-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462eea52ecf8421c53bb7dc5ea4eb44ec9e279532735153b7c54f5e3e44e0bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-nightwatch-parcel-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf715bf25efa7cc4338bbd3849ea8c9c5f15eb3cd6d1efa2dab6d489b92b72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-cz-conventional-changelog-slides-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c0b08346bf9c56d0ce926bc8bcbe0c8fba7e8a52964cc09a4318f02e8cf27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-enceladus-antd-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e01f38b5433274e1e38e596e7713f44b9e706f3748c7005fb964c931d3bc238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-cressida-callback-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c77ef0113fc08e0a50e8478f17c2181fa693d186f69010fad57b5fb1a431e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-halley-pm2-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b550f4c21432c547db7803570839488aad6e6d7d907e29bf2f2bca16cbeed09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-transport-iota-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2344ee38fa070a53a841bad9565ace23b620ee3a3f80a0565f958d36b582ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-library-solis-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19a15bdf89ef12889e458c44d98a1bccddea5de11faadb6a83e25501fefd3f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-backend-bootes-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d478dcde22ec2327defb9b0c58a5a62631639752144f7df308808fb78553b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-event-figures-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd440be5c2398a1ffe5fc7cb8bf04029cde060eb05763d8cad3f255deb78d732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-cassini-luna-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cb101e3f9934846779c5bd46578227d090a1610d7d751f4941518c0b0295c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147128 Malicious code in registry-fork-terser-webpack-plugin-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5f80d581068875ac320615ae15a242874ae033d46442d41454a22228f38a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146909 Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144050 Malicious code in jupiter-bellatrix-version-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9767891eaf351f85b649524ef9c02582915d6cd03f4a573811aea342193db68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-alphard-dynamo-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55fa9c7ec7f02c2efbe3f8f04e4a49d7bc3465be28ffbf97b4dd6915297c77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...