Malicious code in geckodriver-xerxes-capella-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8243976b2a0fa8bec3fb00bd12d4ac5e6c780a4786f554e126b8c60c391f23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-got-cross-env-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff9bfacb88160eb86cdff05b33e80ccc35019431641ff471b088dbeb4ff399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-jest-await-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-nuxtjs-async-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0547138917a1647cd799533fb1a5d590a7076f852e032130c1b80b909a792139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-docusaurus-dactyl-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe9540d294d05068d083d49e995048c8dea4981c2552bcbeaf0d0147055b72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145232 Malicious code in mutation-spectron-elektra-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfc5d8be3241831b91454e7c38a3c68b1bd22f5176c552f8e6f778fdcaa045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146792 Malicious code in publish-local-typeorm-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4482cf83db452cdff612d207cc3d09e52fe887e377776f0cbc30a97f2883b914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148445 Malicious code in tailwindcss-janus-docusaurus-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e1c10d9dbb89f0b0f2583d0b24dcd813e2e7f27a7a12e0692a0fae4c81c2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140880 Malicious code in comet-materialize-hermes-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988f0f6bed7c9829fc6dd7e606fbbd189ed26bde48bd3afbbdc2023c20065626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149605 Malicious code in xanadu-package-cygnus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fa2d250e72977c2e74b7ab03029d46a6ede791ea7df99c5cb30ab2ffc417dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142984 Malicious code in got-release-it-nodemon-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2424016c8ee5e47eacbc475dc2f28d025a81a82cbae0be1a60689f3d65c1ba49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143252 Malicious code in helmet-enif-gridsome-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb39d8e6ecbba968ccf3078cdaee4dc1337a58a7ffa64e62d214da2649c403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141971 Malicious code in element-ui-jwt-uninstall-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5a60826ce2dae0b128158911da5fd082c31135b1f850b0e1134ec983ed2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147345 Malicious code in rest-docusaurus-xanthus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51475e0d0ca1aa3b5682e8e921a79c3fd824d58ffda5d2a89baa2069c373a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141587 Malicious code in dependencies-upgrade-request-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465f8a5b50c89ad9d8f18c8e6892238427b94313db41734688588131e2951400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149200 Malicious code in vuepress-rollup-plugin-bootes-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459bba9d11d9ac0d287ffc425c6ef388ffc1edc035bb30a831d617d5e190d4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147073 Malicious code in react-bootstrap-rocket-async-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eed4998bf00e59d674933b76fbf9a1a5c4a158d6c5f0892cc4c658ac9d96f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141912 Malicious code in electron-builder-spica-halley-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c33cebd4c8758db9baccad9a14ccf7c4c7f5fa9cea61bf0d798a2277d41bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...