Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-node-config-node-config-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c474c424b69fafd765d12e27755c0381c66b0f348f254abc2bd4a1dc5aa1273c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-umbriel-phenomic-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6fae893ca9d8e8c7d49eff41d14c15c89d504447e521906ec780520d4b4d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-upgrade-soap-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601c73ad9ca5a7963e14be01345e21f536a67da6422a2d129b0e73e809c78799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-mutation-enif-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212e28b1fde526e80106961c1bd090110c3ea00225817c67a83323d30157c811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-farout-aquarius-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6481513bad4c7765f5cfbf7dd5138500e3e165cb7064776b23ada96b85c9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-nashira-alphard-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d892e0621ffd010621c749e7224836ac446d06f96c997e37d0d3e3eb69033e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-perseus-hermes-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bacb0d3293d40ff90d010115ce5b01cd474c2a6af9cfa35aca2abab004ae82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-vuepress-uninstall-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22c1b7d849adddb2164e3659fb2e5c1d9952215c0d2bb3750fe6a52862dfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-perseus-betelgeuse-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381da3a96c7e7b45a69ec174da49f251e1a0b300209a66f514d143c7960ad8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-neptune-taurus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a4c90da9164ea2ee6d2e60d2ac1a6098266e9489620764bc8ce379afa7aed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-child-process-perseus-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3677b217765d5423fe859eadb36db03aa7596c2d9df7972ea04455361e5815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-eleventy-centauri-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff10d0c2bc381296e95a09c4a4c449a52401e65d48f7a9eb35b4c1232441201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-heka-mensa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42240a0951e6d568b6eb3c3c4ad953f7fbbfc1af556e22fa93ff5531099adbc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146990 Malicious code in quito-betelgeuse-ursa-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d12f9bb05b4af8c30ac4689719f757f75fa39a781e52d2bb98ad133ace0e3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144229 Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140376 Malicious code in canopus-writable-acamar-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3dd08d49d109a4903d040371041d4d3b34ded3e4e3be67ac6828ba2fb33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139240 Malicious code in aether-promise-airbnb-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52083ff1210db5c0190ea675543f7b26ee8b659b12480c04548f5902aec8103b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149763 Malicious code in yakutsk-config-mutation-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e87fd837a3fdcb7f7a0cd9c466ce5b1a6a242da406d99ac0541734d5c18e73a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...