Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-sirius-phoebe-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628570f78dfeb10010f186a208895ac420fafdd984bc72f60702a3a961e268bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-postgres-algol-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c904c75f2daa11cbf3ccea2167b46a840af6a20f253a4d8a2b60fc1576445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-cross-env-csv-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c342fb3e60fa2afceecf9082d7c1b1dea1e6af2b2fb452d854bc52c3d7d9892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-telesto-mongodb-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d88d5da820ec71695787b9067c57f839dd6f8d9bf7a796481527698196c2020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-avior-corvus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d479fb7ca74832c2b78a20baa9d8e3c6bde1afd6816d629f5ea11d482c9805e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-lint-lacerta-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33c2d3287d40f4339bf093b2d26b8a80cde3f8072b1e90380aac86050a0d518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-vega-ganymede-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba68ef1ecbe1a9f3230f0d417d74740cde111180171008aa80948ac046ba77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-firebase-jabbah-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83963e190ee16a0e46c3d5d97c4e3e65793b6f16cd4f7aba6809f48e59ffc509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-farout-morgan-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17d6cca1564673afeeac69a3122e8b70e262fad2863a5d0639b1f4bc676a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-event-blitz-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766f03cefd972d44198c480800afb0ecbe61155b28ff37abf26a9d7aece78ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-tailwindcss-dynamo-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0c39532693cc4e6a18279726a197b967b08a795b72a474e2b2678b46a3f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-schema-ophiuchus-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0e4548d0345c3c25e6d215a91cfcfd790bd26b81d2ff925912297004814b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142722 Malicious code in fusion-arcturus-uglify-js-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcdbbe7e76603a0b829939b4894b608d87f4f1f8ec3bf93f24904bbd379212e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147697 Malicious code in schema-init-less-loader-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b5ce77942656ef4a6d88bfd3d34f499d4f545e62466910015e1687c70bf490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139562 Malicious code in aquarius-xanadu-zephyr-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2cedad061180675ee04280017b0fa390f96a0e919fa21dcb908376553ce93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148024 Malicious code in soap-kronos-altair-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d77eb1f92067d89ba7771e0a7455859f0f64087963510a65ec757bc34185c648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141754 Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148096 Malicious code in spawn-figures-async-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56662d4f8f23678a960291b8d19f3aa545e75a2346fcb87bce99a7c591855648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147347 Malicious code in rest-exec-graphql-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e058454b52ff02631b84926bf7b5588d9d267001a3788c2702b7fbac6398f356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...