Malicious code in avior-apollo-oauth-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b3417cb0939af2d7ef1ffe7ef71b3fc5def7e905d096c43f0169cd5108118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-loglevel-electron-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db4a957b6d9ec52cad85ef2144c73b018c6121df283ccd8fad94540c5c1f919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-epimetheus-selenium-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be603a6ccdba311fa78ba451f8072a751787808a917f9b9d7795778a7aac3627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-chromedriver-koa-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47f5de9836cd70c00ea3485794cb4fec4e708979736fa89733fbc1bd82ba97a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-oauth-less-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd41cc24e26ec4db071c81f950a8b2f7fbb929edaceed842b3a51ef8fdfed23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-json-standard-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8bd6b352029ad45252a1342f1a9e98156faac7a089148feeee497d82180982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-perseus-loop-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61172e3c6854cb76a038cf824b66df090e14de7ea249bac4f0599eb783a7758e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-jwt-cygnus-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55ce391fea8ffa909069d2105df952902ee3d59197e6391746408eaeb185e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-meteor-slides-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db4f750a0eb590c31e0a9400a047a1df8bbb6e37335e96c282103d3ef23085f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148009 Malicious code in slidev-mongoose-middleware-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e740fbc701afa1668b536493648225563f609e28680c2dced973d44fa761e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-sqlite-yildun-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3dc5fc95ad0f7c7ffaed90b154c098ec97d5db507c5fad75490cc9d210ac2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-nodejs-ultra-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f3668b7d034cfc50c80bd3571e04523f59d1da1eb4392fdf1be9e724ce1663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-chalk-hugo-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971e6e1e3334906cd75f5b98aa72feec872bad9119db2e22b00b998350a828d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-shelljs-antares-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0876a1e9a989b814de994507e31ad710b808c14b7261df61127483c6978c547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-aquarius-lacerta-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c35ff5042357a7a555393285b27bd46c2e007a43fd2dc56455afcdcaf449c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-pulsar-prompts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea703e4ae5834db4e876cc760b1a58ec2cd07a7e560a94aa532b291a434dab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-fornax-capella-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8732fe50bec3c6b6e71c1fd8664ac16a6bfbc32a67a0b35570201c393fa870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...