Malicious code in wezen-spawn-oberon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5ee2abc458f3a13891087a3f60389332785b5b51eebc48a7cda288b973970d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-tailwindcss-gravity-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e421f2f76fa5623b5dd332d879008aa2fe25ed6dd392c95ade3cdae01c4cc7ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-deimos-leda-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8475c1c266d0e690c2f9296e115ccc4b101bfc71735de6f158cc7dc1336c634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-package-concurrently-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40dcf46e2c00c50b6245feac36e411f6cdf81cc03699455444dac5ec221b5984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-cache-kastra-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8de65d6bf085e54dfc5ceef0c82d2d695fff047c8862a796c6784249869777a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-spectron-npm-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a344d0834e6ed996d83960e9b60ac999397f5a12d6a04089e3492f5251b0cb0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-venus-hydra-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5a4b8662afa788e2b7590addd7547d4b4c9ab080c339307c8dd4bc30208c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-eslint-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0de403fbc94af61fccdd6163d20a9945416d14997fb6cadf1babb2b5f9472d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147118 Malicious code in redis-webdriverio-radiant-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897a7e6b0d29673d0a35368dd757e92f753b005c3adffa0fa191ef74cbe7ff03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146694 Malicious code in protractor-pipe-puppeteer-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1520db9615b2fc63260e5f7cfb5985768b9d26e4cfd00e1879c4fa2ce22d6bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146021 Malicious code in pegasus-chakra-ui-spectron-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7be2d5896071aa511b4fddd7bc90af4dbb750cf4dc6aae32460667ef98b4bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148688 Malicious code in titan-node-config-janus-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3953560bbf546385e3116d1295a495a96bf128ad40a003706fa0d5cb2c8a6d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141562 Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141606 Malicious code in despina-publish-dynamo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2239021d8ba3e0fd35cef18f03eb658475db7e972d2afced467e377c9c17d430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144759 Malicious code in mdx-ariel-stream-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f35523ae7e04b5f355668214340036ba014f4224743b24d68087288025b843f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148255 Malicious code in standard-karma-markdownlint-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9695934231691f2b33a0f68d4712427a228a65acf1aba1be1eeccbe15c670048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141006 Malicious code in concurrently-fusion-init-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a0dd14642fe214f74258e5f7c9daba2a84c171060af3d133f58a623b6e20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143157 Malicious code in halley-node-config-zenith-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e137c5ccc468d7a836bbec4596799076bc9c0dab8634e59dbbb1e9e55090e1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141954 Malicious code in elektra-toml-chalk-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66426a9b987a26db0a85bfe40dbc680fbd76e9a476684312d2f5f4d1ea4da689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139860 Malicious code in babel-heka-virgo-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840c87e2ba9ce27cff91ef872cf38e9c82b5182d865525076fe53fc0b1207117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...