Malicious code in venus-europa-phenomic-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703167ef60682806e489086aa92d5992747677f48f9acf863b6490bb42e7068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-cordelia-ignite-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191f77137175533bdac0d7f62ee240d294f070f0fe423479516c0edf01b5fcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-css-loader-ursa-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d53f49874e4864e74dfa98d9d5a9d4aab907c412463f74c6247ac80cd5a0c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-thuban-repository-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c074994c161bdf7cb79253e0cc659149af99d893068ef5bab57b54a45a15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-optimize-css-assets-webpack-plugin-miranda-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaa871e18d8615f0e0c18e15bf0a02a74ef0928a0fc68986a09fc66ad5202a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-bunyan-weywot-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88bff2320d5cdd691ca28bf7c30f99d4da68b75a96ea9f9ad4d9a602cfefd49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-foundation-jsonp-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e0350965ae13726f78400cab872791dc3e71479029009fa263dc5231d24251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-semantic-release-kaus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-geckodriver-octans-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9229208f0bbf990d1891de79b9d2b99741eb73cfb03133c03e8d495f8f34529e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-loglevel-meissa-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde1164a326a627b51b374f38cdf42b0be4fa461d5adb8c8c1427ae83d823cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-altair-antares-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d65a553235b8b5f8dee224e120bd0300ba09dc2e68d4079fe9d9e1f26efa32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-apollo-janus-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05007f5fa2858df75a8256dd3fad6c0555590c1cb53011e0ce7dacbc72478c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-dione-markdown-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85222759ae1d90c0ef7fd9b7ceaef96a1b0046b114316d86b790483370a812de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-scripts-dagda-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3a83b3d29fadebfc93ee31ec22b2fba479781dbec590684f1877f0b2d8f572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c3dcd2d7106f3ab301acd84ce92ac2fe07d3cb7896514991b57374a38f2209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-postcss-heka-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fd2d7a5c80c5698eeb615aee37f27284e32645ca8a48cf6d96f7e32684f2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145929 Malicious code in package-europa-antares-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f35a750f1e2d39ed65fe2e942c757ae4f634a276981126b42542894e1936b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...