Malicious code in jabbah-prettier-plugin-markdown-dotenv-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2d658f8b51340fa2613ed1642613bc96cf0ed9fedc8ea3dc4ca392be6f3472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-colors-titan-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cebfc8be6bef47c23252557742315f97d2ae7cd885f7a2ea72c3afb3faf6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-uglify-js-gemini-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8912171b68a913feaa979fa26a61e925d98cb34760af2bac8aa1baf35290f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140219 Malicious code in bulma-mutation-server-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c9fe09bdabfbe33847cdc28274813f327e3a1bbc8730cd30684270260cedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-unuk-dotenv-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ede693b2a0091c7dc40e54e02994f3841f5d5018a0a26d1ce22f4216b025d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-xenos-spica-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0918ab27f9677fa071f80bd9e201bc29d7d84c5086b06e1819e9ef05c5c31882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143745 Malicious code in iota-umbra-upgrade-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c04ac07f526f3fcfc93f56356dc15234e960923abca2cb92e88e86e933e315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-celeste-cors-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7492e3952d9434eafd92a7f6c3705c199c7ed56c4ee9f13f1a3fbdeccbf70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-changelog-prompts-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7e4316ad2e5cd206f165f7146db81b01de8cdf3a67430488a7af608beb130c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-xenon-redis-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a82fb14fc14d212a9598dafb9eea71406a66225bce74082297225fcbb50c261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-fomalhaut-xenos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d6eb4faaf6ba78ade9972bd1d892ccda5078e7cb3228cdd5506791220d4601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-electron-builder-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565605b8fcdb03d5352356ad7f15ffc45159ec0491f1a7de8d9824bb1a36ac6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149122 Malicious code in venus-sails-betelgeuse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7dd16388a93e8047078995ecb25ef16b1db8fece43c462fef99199b710136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140687 Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142879 Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-ophiuchus-magellan-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3c2be086a4c9668e4e502af1496a91f545d08b56e15e92d6b9c36a59b5b41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-dagda-commitlint-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3a489e404fa3e5ba48d881d8d7cd1f82bf1bcdc6ad950396eb54957ab413aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-umbra-levels-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bb19450ef3f74d25211f36a45644b45d6cfb61738d51e244ec17fd1b86d780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139842 Malicious code in axios-virgo-registry-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15200d0c006ec0dca8523bfb533339e3be63eff22858e13a97047e073a292e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...