Malicious code in process-jsonp-build-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c952c1fa34bfc6b5000796239edef4fc37cdec5ac23e9f43e9415eb5d6ec65cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-babel-sagitta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280ac52a25aeeb1b2e6c9f3a4a230c3844f59f27bfdf1b084f24285bbc370d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-docusaurus-dactyl-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe9540d294d05068d083d49e995048c8dea4981c2552bcbeaf0d0147055b72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-nuxtjs-async-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0547138917a1647cd799533fb1a5d590a7076f852e032130c1b80b909a792139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-corvus-atlas-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea6397626f678ed2718693c793e7e8c9d14c88e40df83e6f5158ac589f021b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-nconf-playwright-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd7a9723ecbd6b28dcfa420bdf1f77da10a7b5be73f5dd8789d58f3db5f0502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-jabbah-airbnb-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f66b30b9c620662089edc15175afac4ff8902761de404a5e35d24b444ec0ada8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-jest-await-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-mongoose-cors-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2279c51867e3bcfa98c896e4759ccbe31ff9fb080811277a35107fc44962b9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-gemini-wolf-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bd12bb3be8b01b050f726a8cd093fee2c9c5ad5226ec9d820cc45f66dbdc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147806 Malicious code in selenium-mensa-xo-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35fecc8fad9cbba384f0222c2b9cbf21220083ecd5a1a258e3cd02eae7a83b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146910 Malicious code in quantum-mysql-schema-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1540831b0f95580f1e8db066bb4dfe5d00d24bd0b84256d15212a601e95c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148375 Malicious code in superagent-castor-mongoose-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a95f0631839de65b434dd57e55267fe235f40bd313d648b5f82b9a93881e7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149528 Malicious code in winston-sqlite-typeorm-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141444 Malicious code in dactyl-inquirer-version-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8252b1269cc558b534e0319a0675c490082867e8a797591156fe834d3f1d7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142614 Malicious code in fornax-corvus-socketio-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b118c859ce159a51547289bf829d5e6adb46f1e598638f8044f7c778c3486b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140044 Malicious code in blitz-enceladus-ophiuchus-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e5ffad151138012cb4919f2290fdc248dd5eafaccc502f6fd5d421ba0c35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...