Malicious code in fornax-gulp-cross-env-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0116f63d9e00fd8d009e592db933a26fd7559ef2ec9933865bcdcc325f20b70b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-perseus-chariklo-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a32839493716ccf5866966fc2c0c28d2135ef1a738aaac9f3df7a8bb551e8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-miranda-levels-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c748cdd6fd77c1cae9a437cd5bd642282b813a08cc3826fa783055b41a5c2d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-norma-algol-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ad09764898dc0af2247a64191afb7bbd40d6247e262240655bde8603b8a716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-cors-scorpius-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66719063eaa5d6534858f4fd987d7ddb6562a50ec3a91cd01caf702bdbc25571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-nightwatch-axios-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbbeee471022a3f37436f04cb109e877e4866d40b6368dc49dd3f4aac44dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-altair-markdownlint-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-dotenv-safe-elara-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504480b3893cead11dcc82daa37f6b6ef8bb2861e471a9eaeaa0c85d0b6cc159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-firebase-hydra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2968e2c1db958009855484fb18365bced939dabc426a4aebb39c634a70f67dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-materialize-non-blocking-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bc6c2ca4e1c5683d6cd7b60e5b027a62c82412bb256bc38dc1ef4c888bad6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-promise-phoenix-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83997c7f595e58fc0c9df6d3ab102a43b0ac4c98f777de56bcb403d0b92d078a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-mensa-kastra-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3159ca473ca3810c1e97cd5748be5958ae8417f1f88bf30e7e1f6f1ada5d4caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-celeste-eridanus-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702a92f89ce951ed0dd9e020041f48c12217dd201c89f2cabf03056e73fae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141958 Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148531 Malicious code in terser-nestjs-deneb-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faed8ceafb424f803065b2bc376f7e367d1e2278d4c405f8cd241aee76e9dac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147283 Malicious code in repository-transport-delphinus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0fdc46c42635553bfca3774fe744b2f18d608d3c3168032ef8cc6d1e097991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-nuxtjs-antares-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3850f7fcebd9ea546cc4cf330ad1c8e2c63e90b43b3345492b1988fd55788ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-upgrade-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7eb7f5199d42872864bccb85bed6da5647e35478b981e790fc8cdea403f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...