Malicious code in virgo-toml-passport-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 584f8b619a6b42d51e3495d518d1c3de32ee362ccd4c539987a484b1f3711094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-jsonp-sequelize-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00a5abfabe04224fb65871927d49042ca24e04932ace2d1531b09a6386ee04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-blitz-radiant-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4348baf1f1458216d94dd1f309511cfbf0fdf3a496164b285479c6cfe65ca185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140201 Malicious code in bulma-airbnb-node-sass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05b2ac08868e6c7fd670b15b48fec5a3be342154aa5b9a86612c8413c16242a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-mui-eslint-plugin-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3ecfc9ebd051b1684c5e2b349a06ee960d316c0caadbaed438ddd4fc9bd863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139935 Malicious code in bellatrix-element-ui-native-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d1043cedb1fdedef8a8f3bc8f478c9b74d28d60356cae5f3555fb9b7ae998c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-xml-nextjs-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-commitlint-transform-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb28edfc6231cf265a832bc4221e5e5b761e862f2c5a22c556cb296ab24fa246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147613 Malicious code in sagitta-quark-browserify-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd0e447d1df55cb8dfc1d3a02be155fb47b264e13fa88878c6fc14b5d2ecbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146280 Malicious code in playwright-delphinus-javascript-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8609174329178d6e07eefee2d2509cfbaebe485e13e9cf56b99a7560bdd0c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142069 Malicious code in envconfig-auth-redis-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85555441a0c2d79b1d1b1969076ac3264555cefa255a2a16d975c6127b68c535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144042 Malicious code in juno-unuk-indus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefc777df30f65493f2c63a279abb6952249875a9d4a6558de667af648f650c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149379 Malicious code in webdriverio-pino-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca553956144a6de60b33e12b7d4ebf483c39d114fdef6305308ea3dea7c685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140400 Malicious code in capella-wolf-testcafe-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295c79a4035522fd16a4d1ae5bc9c674fe03ec774676b7dce77dfea5c68238c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140468 Malicious code in cassini-koa-nuxtjs-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e396ca676919a7d8b282472201332846db947ed7a0adcef9d8f0659a08b91ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141734 Malicious code in dotenv-parse-variables-proxima-mongodb-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971d4e3c75caba63c864868b49bfebd4f37e76c926e7cf9ebe3439219e30418c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146680 Malicious code in protractor-dactyl-nightmare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25eb547f2c0710a4ca734107b39b3538297761f961c0a01fdf10bf7fd50975a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146053 Malicious code in pegasus-spectron-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bfa4b5df1c46dd1bfc2e3815bfe4db8d08c1fe68806f1e59c00c752993757a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147421 Malicious code in reveal-md-passport-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42df2a17816922455d422894949135bc0c3aed262172e07ececd4836aa13cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141194 Malicious code in cosmiconfig-prettier-stylelint-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2b3af4f75fa5fb6640299c10d355b8a8184131a97251ab5b51ba36f1474cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...