Malicious code in link-stream-global-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-arcturus-uglify-js-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcdbbe7e76603a0b829939b4894b608d87f4f1f8ec3bf93f24904bbd379212e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-enif-apollo-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ce8f43c22312e6ec4fb8f7770cc9bb5108ca8697068e4c8b4bd291dd535e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-figures-async-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56662d4f8f23678a960291b8d19f3aa545e75a2346fcb87bce99a7c591855648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-callisto-pegasus-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8c6de5893d173108562b870f2f25e12c0603035a3c2a34d595c1f62804b2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-adonis-kastra-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec12e9d021d38f1396774e15aed3fc937841fe74ebd34c63516944c0f9a23f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-postcss-loader-subscription-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ea1159c4a3929717a565c2c379b8ccf18b29d7c0134b09a464df5646290ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-airbnb-draco-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01504afcb95e12c1713fa0337df0c7b7117bd5d9a22240957666e63c35a82d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-build-postcss-loader-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dad8ad4499914a024c628b190c40ae7f1c43abb2220d0b3cc416b5b887452f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-upgrade-npm-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e59d3349978c49eef4c99a61852603a8d0312ff6a182eba2bf50e696dd2af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-postgres-fornax-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7494b553cc97ded3b275319f17af2821aba5d578a6b5f4d3de394f7a651c814f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-miranda-carina-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb65ee6b290dfabb20f89f3792d112be79a24a474b795934b0a4e2874830057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144949 Malicious code in middleware-blitz-mutation-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f55a3d1837c6187591f05ff77aecde65c5efc3ddac721b99369b3e052d02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141084 Malicious code in convict-promise-transform-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a773ff24f12fd9deed0f9b0e82fb801841739a9bc9a21b854986738c1090633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148419 Malicious code in sync-commitlint-materialize-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d6947e064d99431656bf3cd47e63c4c90b399ee4ca1923bb8f4d5a0c514454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-rimraf-altair-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51af5f7f2e436b1bf77f1f33fdd45e82656ce5d5f0bc51c4f7e5e94ac407ee73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141551 Malicious code in deneb-neptune-pulsar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139351 Malicious code in altair-farout-antd-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a37cdfa05098dae12112f2bcd0b9d39c4b74b008d19cdec88420ca6f0823a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147814 Malicious code in selenium-spawn-graphql-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bb56bc9a2d81ce14a1bcff9a5dbebd2ee2ca22986cf4b6b12e88a5f9903b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146341 Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...