Malicious code in solis-gatsby-antares-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9221153c0d07120e15425cec2c46f08a5cc1e742d755211e828a0c45e653843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-enif-pegasus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-acamar-quantum-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b5c9916b04c82c901302f7b2133140245aff21e8c829542aa208b5e2af2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147105 Malicious code in redis-izar-react-bootstrap-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6cef921bda83e71f83929fb9be55ab26d6215bfeb47a5eb031441652b002d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-nebula-webdriver-mocha-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c754df984c3ca6bbdfc1ad47c5181c9fb48593fe4212e74086a8e5cf186b6f6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139283 Malicious code in aldebaran-nextjs-ceres-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec61e02727651739214315f5bbf7d1e240a17bf20628ececfcbdab8a6f15e527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140745 Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-scripts-aurora-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c2116a7fd36b06664e2ff05d077433bce5510c5ca44040ecff506953e10843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-rehype-sagitta-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef357f0f0dc562b08c3cf8f51a92672a8a6aab70dcf038eef02ac1f1eede87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-apollo-iota-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419b488c19ab307d7bb586c2e61e93611f22530d984b9211a6dfbe9e169ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-kaus-ariel-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcf0ccba34517812e19d2908e0d25c9cafcea701fbc7b210ff7b4cd75f7d9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-tethys-perseus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef082d3f916b8d6e7affb1ebfad75ec2d3a3c8f474313eb8bca82a69e1d589f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146551 Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146340 Malicious code in polaris-europa-csv-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3938c219c4816460cc37546a2fc49b42bd9f2df9bd9194194149724d94c575ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142496 Malicious code in firebase-epimetheus-request-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c721b5d84b5da0745603263ee7cfaedc0a0037ad7034d14d12db5a205122739f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146515 Malicious code in prettier-stylelint-publish-ganymede-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bee700dd60f89d7636e9dc4890f0ea34fa4b85a80efabd156924d8b4000d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145565 Malicious code in nodejs-frontend-sync-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ae7bd01528ae4eb0e9b0708506f1ef7e24e2a6f8bcb754efa14557a29756e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid-coral-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da68fdfb4d7b9042f7bd29b67cf97804a03a65a7a3aa6f4978362b59158a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-peyek52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a5ab0b6777ec17f7e86377b3a90f798ad551d283056f39590015225c739e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-gado-gado56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351a699fe9b86193bca48aea5bcde21871cb0dfcd5ff891aa80c2ee7994dc0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...