Malicious code in metalsmith-cluster-epimetheus-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d400e6ef7fdc5422b770c6416d4ad559acf5cc084450d0220141b598d71d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-carina-centauri-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c07122800749f613dd46f580699227bc1e00d0069027dc2215f340c2bb00f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-css-minimizer-webpack-plugin-kinetic-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3e37d1cf32921aa706fc4ffd97c8fe9ad694e5c8c7a37d55e39241b81f6b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-cosmiconfig-eris-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93dd9d8fc57cb176b04e7b09587a7b5e36c2d4b77c0db76abb41f2fc0bf77da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-native-webpack-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6e8418410495e7c4931b3bc647585fd4725d643d2d254e395837c0b1b7288a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-farout-link-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b058b79d3d9929bb06e60f1a798f4455a9259984cede8d69b8d1b47d524165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-transform-colors-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d70cd2849f53b4ee927dbd5ce6124dc606282f9efcab3a38d79e9435a06b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-xerxes-gulp-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca524df6fe30d9a679a3caf1797ead4065707ec93bdd4b4321abec7aa38cffdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-enceladus-process-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24364b2e6c5dc0894a47fbb319e1cb52083ba1222d56b868b57bff6f62ef7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-gulp-eris-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a2c8f7936923d5b90b187fda4882834514ccbbf6c8540c1405cb7cf14d7dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-hyperion-process-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf4d6966d2840923341cdba9ee04e56a003d53e675e76dfb1440a4e1b2c0800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-bellatrix-commitizen-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8300cf67a6d08ef996a5dd67ad197d2f9e90d878f87659c59f6da61608c421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-lynx-server-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653bfe654a28358db49904eeb2b34c023f8628805655e602d273525e055557ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-toml-pyxis-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6dc533b7eafd1a447732d5171a98cc252177054638dda40dfda403bdeecec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-ophiuchus-socketio-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89628c22eecadb0e3a72e314b6f2162c8d82153b70aa48aa99188ce9a8832469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-json-commitlint-config-angular-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8cf9b1c13396fdcaed50f6accfb81507a6b264062567666b0286ca187fbe57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149854 Malicious code in zenith-lint-local-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ec276f823fa984673f06be515e340ea0f44cfc759167248cdfee29be770f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145561 Malicious code in nodejs-dependencies-unuk-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fc09dfbb31483cee6efe94d252e17936fa2604f6c450ed55d774c64b7e440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143974 Malicious code in json-gatsby-eslint-plugin-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b7d24cfccff24043a5bf318d127b3dba80547a3c1e34d19ee6f55251614c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145195 Malicious code in mui-betelgeuse-chariklo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f12d26957e00101409aa7e0c2cfb856fd8a82c85b7b2a264cd249f286106c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...