Malicious code in resolvers-kastra-hydra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff37cd335a423752dd8b1bfcf8707b83cc0ff0e4471cb874fb88f228d745ad08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-epimetheus-redis-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe3501ebf5ee0e9d66130ec7cdd596273f343020bfec46601162a249a5ae585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-deneb-upgrade-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6c00e3e89c4212a8ebfd8666bc2f8983c4e438a26efa2c2358e75f383953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-ganymede-typeorm-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d9c347f981d0c30b3542a82ff394ac958982da974b04c61e44d8d637fd24d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-nightmare-grunt-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b9929aa7b277334fc38d873c4779114970d886db7dbfc06272eae08e82a285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-pm2-betelgeuse-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579c08e42060107bc857e3612f24ebab9512e18086d759797eb7b738dd5ee1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-backend-antares-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcdbeb5f3f8404e93c29ffd571f029c12b4afe279214521372044e00e6e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-antares-iota-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219c5e9edff5316f15f5da2c1888bfce3d91c319d26599561b00638d6cacc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-wasat-standard-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e7bdadc36f85812f4103f7b3cbbfe742df9bddb1406e6bbccc939b7e62d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-venus-enif-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d086f3c3518497d4ae4dcee831d523bd73b0a05e4467a5ba429f860ddb95cae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-iota-hyperion-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98c520b0171c46afb33078873f06fd90640fa07e9795e8262bd23f12c992a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-rollup-warp-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4302b6e95c8c53fcca6b49b336dd82f6ae415435405313d7950b197a0fc74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144646 Malicious code in magellan-markdownlint-concurrently-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260d3be4e484f62d2fc2a90189330282e1a805f14b6990559ace653282d90529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140113 Malicious code in bootstrap-link-pino-pretty-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b1ad1f4bd0a9eea1be9a5facc0abeb0284827a5e7994ce9dea62af1df74e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141486 Malicious code in dagda-server-writable-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae875b5316c762804cbf34948832e6ac8d9e8e240e5ae1343644ef305b5fd088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148171 Malicious code in spica-nightwatch-solis-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18b2be23c0b61533e2b4f278ab91029f3a5d12d5d618864c4a2aff4aec59b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149145 Malicious code in version-scripts-leda-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750893509b504719e994b929fe1c82872886c9b6bdee346c69b2861bbff32252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...