Malicious code in telesto-quito-halley-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e627f3f10e73632abb1040fef38bfe444561fc70410833337e38e8496d0e2baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144265 Malicious code in leda-dependencies-fomalhaut-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae827852ca50c8b8261e018186531b500df684686ce65d1fcc9aac58119916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142970 Malicious code in google-testcafe-apollo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b892143c28a050f926f84699d2be8bb573669adcab03b0d52a3668e709575c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142300 Malicious code in europa-webdriverio-chromedriver-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9261fa6b5e81737cb2fb47ace42efa2824f828b3c51aa7a92dc69a8f409c5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-delphinus-rigel-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92fadb7b85c2e89b10089a57a32deeafbd27adb0fc4983fa35668d33e523531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-iota-xanadu-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575355204cf2d8533897eda0e081bd9259ae4c69d20cf2c31ede843fd5cf5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-thuban-dione-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ad67153b6a753f31c031e3c5551906677bd3c5e5b020151ebc1bb704100e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-gatsby-antares-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9221153c0d07120e15425cec2c46f08a5cc1e742d755211e828a0c45e653843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-atlas-passport-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c316ba24ee4bf53cfaa8ce2c315076b48305c248711325116375ce2d8cdf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-auth0-apex-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2832198d7eae378760f701bc5fa69386ff7a313e612cfee8431f5a623fa212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-comet-module-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b564dfdedf86f43133b6b49d91c9d6a147c38582bf8da887f6659f1c566f0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-prettier-stylelint-testcafe-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4618205a87f80f36fc1c5ffab89c4a7f8851cef1fd278fc5faaa3a56cd859d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-carina-iota-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ebc54a6c4ce6014709deaf1289cf4baafe511737cd62e0fe961e77f25872b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-eleventy-nightwatch-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5e46a452ac9ffbe7beb92ebda72ddad43802f7244ac85e3f7a8ec33bc92392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-equinox-rate-limiter-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830d11bb383e202f127224d082db8697943104502bf0c48ca97a4f120141df74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-dione-helmet-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d34bc74442aa852ab5dcc44cd33954927ffeba159d2a166a11da6e369b77991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-solis-hydra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e4c944e5588742767a5571cfc83804f233a9273e1e095b54ca7a84a00cae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-kronos-aurora-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02998f5866080f53cd6472b39a98ec84ad72333e9427068bd1785888188c3216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-loopback-enif-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b262f3dda7c4c884473fc437198ad7e57eb99f347ca9809993ad238590768e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...