Malicious code in dactyl-schema-commitizen-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7746f3e8f99af9c8c47f87b8f62362e5608f4873351d72567cbf9894e781f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-websockets-spica-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1ef2938b730cd97e02dae9fec4f5bfe408c0438a5897d9aab01b98b7691725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-forever-vulcan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d964a2ac3b3ff01e0e1881b5a523f44e15739da835226a37dab4da08c7b4fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-gemini-procyon-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33266839bd8ec4b49bd7e073f4cb98f476214e8f83e7217a1b25ce0b091c8219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-webdriver-mocha-testcafe-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97be0264b0bb5094af68aea6b2b3948642428c9ca9efd84ddf15d7ab02acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148610 Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144773 Malicious code in mdx-radiant-sagitta-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c84a0ab09a6df815a8eecabcebbc28db9b5288ca23e5fa3780ee9e790461910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145297 Malicious code in native-venus-kastra-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af819cc7c6039a99830cec4ec922f20689dda1cdf403e00756c32a48533001a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139532 Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139634 Malicious code in async-phenomic-cygnus-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942ad617f9c6e35ff392813ea91ecd284c56b5f8e7d3beddf9829e2d1e25e539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139978 Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe0ed93a195f1e90b9597a17f9ae38aa7a191ea284524761064ec0713b9439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant-bronze-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16146e4d4857e60713ef61c9a814a154e55f4841549b6a218394b458f93f4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138785 Malicious code in hurt-teal-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f124b2b9ae4a334e270a929e075ffe74689941d78356cfb0a02d6c2b73f918a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kacang22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa3430a55d3c5f027fe863c5159a523ab5062fd52e434241c01a36d95be29cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-esdoger38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521c803f26f5615fdd7b1564871421844303080172ec83a1dd3fcded04ea1a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-asinan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05dac6af62c60859048f1c8f351d524b6fb2c9e5ab5b1e5a8bf9f2cc9ac2f422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kue56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b860ed7d3909eda61c3116e450b4f03cd78a98d36ae6ebc59c98914eca852e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2ef827607dccbc95973e69f943ab79c96f9d67ef4ff0de6bab22af7f6d336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-botok99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52386f171bc7d556ecc0f9cd4b456c40b1db275e71734c15f21b1d2e13f97cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...