Malicious code in venus-mocha-start-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d1cc69d270a33ba2ba84e61c8cfdd3271303ccc4b24590d7adc20af1c71d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-xanadu-husky-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0e06559e846c241f796193a8640d2e67285bdd466e9b70508261a19b3cd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-auth0-spica-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2a02b14f805250844e02207a8da2c9897a344b77ef90b326bf6fc029b0590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-ultra-process-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf421c8337829ccd7752197bb60c5b21fc674b453bfedc4a03db7644b960f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-bulma-meissa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0babacd4b2202419befcc339789b9595da99bbc780c6d678c8c4a17261fb6900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-chromedriver-pegasus-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c43fe867ecc24b604c66398f6f16a08e346129336a1fce7107fa2ca1f3097f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-nuxtjs-webdriverio-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a490354b893e0ccde2e7ad0b5f8c35be0eaae85e5ce7d7369ccfbd1b1dab1212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-ora-relay-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b21441c8f78c5afc7820cf0a2d79eb3499fa1781bc2b779d68a7a46288bf644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-electron-builder-eslint-plugin-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7456305cc58ebdceba37e7f3ac074cb977be82975180ce9e478f8c7d20a17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-ceres-quito-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9289dcef1793d204247573c436a3c5faac666646af49ab93fde9415166c97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-iota-sagitta-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b591b6fecf503c9168c2bfa57bb3c5d06274f8c76955b313a261d043f484f65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-xml-europa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbeb2f166f38c0314f8044f01c7be8a2450007685583f33f3f7419257e11b3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-elektra-test-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54feba1b0ea2f5045f52f560727f715820fe005c0b44599e9e1078f5ea1108b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-telesto-test-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fd53c1da999600d870a02683e28098bb3288c9a590b7739013b33c2b68fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-quantum-gemini-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b23ce53acc96ba7696a17390f3443dd9d989aaf078d6e6315d2fb91f08473e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139481 Malicious code in apex-magellan-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52039775c5083912cc2f65d59589cc60afe8445d9510280b6907bc13154e2861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141031 Malicious code in config-lyra-solis-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93918839bfb75a9a119aa6c35c5cdf81d305773332ba2da44822c50953cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...