Malicious code in docusaurus-package-odin-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80c72158c29c094f5a17f94d21f9bc8882f4f430bea81bbd357f33a021a4a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-umbriel-postcss-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653aca1f1686de272649e61e1bde312c3bf99f0ef8ab440834e77b4c521883a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-hermes-farout-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d131eb3506f7819a2909c8e5eaef9a13d9239152771ddb1ed7a40803f726cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-hermes-telesto-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05603c93cfaeafc003a0bb58e349f1528f7bfddd502c3d8ce69b79a2e58f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-tethys-epimetheus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3796b6e0948a85433990e0bdf3e3701014a6a6b5ef4f750248adba4e27d670c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-jest-await-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f2f08d540754dbc9b32830614d963586b1c8b2127b590941f2f7003486f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-ultra-rate-limiter-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e8803202850ab3b057b8d390e9e5ae934720a068fad23608b8943a999a7894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-ariel-zenobia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bff887919eed00708f4bd099ec6d4bc2bbaaca712b700c892b5cd91641d159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-hermes-ganymede-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaca7f4666f55ae283429777837e3a8358b834acba987b5963b359205ab70c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-stream-publish-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87848632542c547d5ecef043ccf837f25736a226b95c2f670c701032a0ebabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-tailwindcss-websockets-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab3ce79ab60b14a507ea4301474169e43aae698fb034ca86bd2c14bb260fd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-loglevel-dependencies-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547ad8a76a0c927609f542c4e8499f14c5106f04ae721ea5b396d3f82f12586e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-npm-yaml-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa37b47332dae889eb886aef463cd255b9f8cdd61f08346e076667848f360354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-css-minimizer-webpack-plugin-local-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2c81158c907717901718ca894e86e52cd0ff7bb06409578ce68b8cd5a40ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141119 Malicious code in cors-comet-ceres-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396b5b1e8a9baee64e013f5565e71c80bf877fde47a43126a9ea1ccca9b051e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146989 Malicious code in quito-bellatrix-polaris-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0332c27cc5eaed2686c971201590aa7f14bc67ea3b5004f6f6a1d5b9f1ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143539 Malicious code in impulse-dorado-kinetic-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e67ebfd227fed972db13048c60c0cd362f419c897718acfb9b05f62a5c653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...