Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-tethys-epimetheus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3796b6e0948a85433990e0bdf3e3701014a6a6b5ef4f750248adba4e27d670c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-jest-await-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f2f08d540754dbc9b32830614d963586b1c8b2127b590941f2f7003486f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-ultra-rate-limiter-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e8803202850ab3b057b8d390e9e5ae934720a068fad23608b8943a999a7894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-ariel-zenobia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bff887919eed00708f4bd099ec6d4bc2bbaaca712b700c892b5cd91641d159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-hermes-ganymede-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaca7f4666f55ae283429777837e3a8358b834acba987b5963b359205ab70c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-tailwindcss-websockets-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab3ce79ab60b14a507ea4301474169e43aae698fb034ca86bd2c14bb260fd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-loglevel-dependencies-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547ad8a76a0c927609f542c4e8499f14c5106f04ae721ea5b396d3f82f12586e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-npm-yaml-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa37b47332dae889eb886aef463cd255b9f8cdd61f08346e076667848f360354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-css-minimizer-webpack-plugin-local-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2c81158c907717901718ca894e86e52cd0ff7bb06409578ce68b8cd5a40ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-meissa-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aa0eb53f38046acb51de930d7b4ee46451b9bb5195ebda094eb86331223a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-hercules-hydra-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d6e4e4353052fa7aabece1ce64d442962f322754056b8fe97872698aa362ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-pino-neptune-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdb944f658ed68cee18e920c32f8c3cb2c9810b5b8551c7e42d18eef82f85e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-ultra-antares-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819cb736fabedda7870c12df38f766380a63c50b19c79037d869d48113023350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-semantic-ui-sagitta-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfec369e426a31d2b86c4582363bb056a25d7f64098deb0db676fb4959d649f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-luna-markdownlint-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab87dcd62e2f0e2d1a152fcb986d0c1c03a209224823858cbf463010da48b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143293 Malicious code in hercules-readable-xenon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44ad932f34bf96ece8178f87b5f7a03046958f3e909aa804cc780b75f2a85ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143662 Malicious code in inquirer-stop-spectron-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7dcacfa1afed1563aaebc9ab7b548454af8fb4f66f1d59bac91eaefccea02ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...