Malicious code in fetch-quasar-jabbah-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf1649167b8d4f02a8b20dc8e342d49fd73db7f424c9befeca109c51ec08531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-eslint-toml-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f249440ac1dc8f9e957617a2c8623846ef58e8783e0d3df5e62de25c9b5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-deneb-non-blocking-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed8eae916437f4396d4472e5b2e80860392a6b8fb1d4c93e30e3815f60809f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-cygnus-supervisor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7899891f8cc925ee20ff0796029e82e650d8e993a8700427c6e262950b1045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-materialize-spawn-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28ddee9609b9433096caeb55f295ce863268d022ae96020a82ded6c378993b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-websockets-iota-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3366cd78a51c22a06baf1fb6daafc61aff9b06706b49c03a769c4f3c12811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-despina-pyxis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d399d73429d9ba27cac764fcba3869ce6e10718127ced0ff53bb89d9614c692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-titan-arcturus-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a657241886fce2aeee3b69ea394d2e4b5aa9e42a1a71eb71d997f5972215fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-fusion-wezen-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e832e31bf8f65236d9fb28ab0c595c876adf2c2de15de8445becee2f77a35ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-nuxtjs-karma-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a66eca8cde6088bdf27e856c1034c60a3cd001c11c8f07bcc814afb5fc46e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-protractor-readable-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa112931e43f24bbfdf4a2b84e975c5dc4fb7573e88503849b1ec74e6da0a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-antd-halley-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ada04165f0bab6357a0605b4d95fc185956c1bc0b8618cb7d3f6aa78bd3f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140228 Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145120 Malicious code in mongodb-achernar-module-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eae1a1d9e6036f757faac69de61b2bedb3d9d5a5e676a3fa82fb1634b3e068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143971 Malicious code in json-docusaurus-cosmiconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9c7c0cb232f49b5048a19ae36888fbf26e1cd53ba27072f1a10a5c6de44de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146997 Malicious code in quito-loop-scripts-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf51555f88a1a8beeca7b7df6dca9b552aacd7c0864758490e5cb995fb9be1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139867 Malicious code in babel-markdown-graphql-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60f9f37b93f854f7de95a5f91b1829c09def43ec0403cb8fc289eec858589f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139485 Malicious code in apex-request-relay-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d1817134d21724214f2fe946a873bdffacb372c5d66c6abf5cb9f37ed49b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...