Malicious code in readable-pino-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b3b852e1f3038c98d784c5e0f10bcd609953ec9ebb113fca071dff047de237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-sass-loader-sirius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143315 Malicious code in hermes-development-virgo-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143486 Malicious code in hyperion-markdown-process-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536192c36618e27ff8830d058e31380e4431d9840dd8c3106a5eb2f8bc58953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146874 Malicious code in pyxis-cypress-chromedriver-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da52702d2ab306157f80cbc575c6437ea3e16d982d6dfc3a6d87f24cf357e7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-restart-triton-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-nashira-xml-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebf92d9869e82eccc178e12492d8e5bf0cbe541283713059d686ce5789fc7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-triton-parcel-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8372b0b0a4a35d0ca5d0bee3fc0d38c81f4d15095069255d4921454a2bfb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-magellan-pino-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0fbea7d96285ada88a9c1fc18fcc5fb1cbd8f4fcbd03557f53a3fd2844737b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-spectron-transform-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7699ee15c3365e2d516a2c2c0477fc547aaf34fd773ef8b4137ca6cf01a765af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-scripts-avior-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5b4797f2b0952deabea1bdbb5fa58d322ca777e4ba13455c2c1d2d3b9bc154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-prettier-stylelint-cross-env-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791b1dc189284d27d4648571cf5f77f50d62b3a6a7d3d9030af59acc5e12c91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-wezen-selenium-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-eclipse-metalsmith-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8a567b6169c24bd6deef07a712d7be0b560e33e7167f55dbb701734528a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144672 Malicious code in magellan-update-config-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e022d5f7a1ea9234ca46dc22df14140afb67de5bdabe0b2e912b051cfd9228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141966 Malicious code in element-ui-eslint-config-public-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d99fba2f44200f3296285a80e418e2f25948a481617833ae4387d2e340e260c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...