Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-pyxis-browserify-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570287166fcb791ea4017fecd25e850fdc1cd20d3560c668487e56d642a49b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-nconf-jekyll-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fa6425540ecd5708afa3a9545b094ef19e5c9f10e6bc065e144607a1b562e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-docusaurus-quito-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4fdcb0fa11f7d81e3e00157275ea670dd1aa4dcec97934fc67da2394e5246b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-update-stop-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5331a6d75858fe3170dba64a50135d689c71f8234b42cf0dc3368ba3ddfe1234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-scripts-procyon-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c2cf53ec3d2c14f36fe622de2de28faa7727c54be9e881b825eee1b796a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-standard-slidev-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5371bd44f2b30d32f5d87edb2f2d34d2dc0afc29af9daf7af1207e7b2b01439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-spectron-webdriver-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3a63a8df79c8649d7f26ca43147682855e88d1324dbac739a1330840977e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-antares-lynx-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876c68a3d2c4f2602106f0e766fc2686e77169dfdf55d2f6bfb901effc5ca57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-tethys-epimetheus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c4505908d045c7c1770f056d056661a1d22b54f2795399b9d6158dfe938d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-changelog-alphard-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d395e043fecb51f3ae6e80dee7c17f2dd39951144372bae08fcb292c682706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-chalk-elara-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e8742ef7707e771c8ceaf7750f9e26d84d6f5e2fa92e9bf32fdaa0178bef63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-spawn-miranda-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83962d261eebbf4ab11649fd1ce06459f1df6412b49989eeb3d2328aa7889690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-atlas-dione-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedb98257db03c35ab67fcb42b96a9bafb82f748dac121b9ca66184b2270ca29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-elara-mutation-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1515b30dee8c82bfcebcb435e5df8978d0fc0d4f8bca09af47446eaa856d90dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-selenium-middleware-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a839aba4aed4b0d37e305b5c204ba8183b86802e74bb12ee1bc3b351553e51e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143553 Malicious code in impulse-rimraf-schema-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f086d7a0bdd974da91e3776911c36ba418c661bbf2f3d9fb1a50f0ca0daa4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145106 Malicious code in module-gulp-eris-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a2c8f7936923d5b90b187fda4882834514ccbbf6c8540c1405cb7cf14d7dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147551 Malicious code in run-script-pyxis-chromedriver-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511449d227b2106cd8cc175337a041e9e22c4a0ec50bedc3bfdd8dec236703c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149300 Malicious code in wasat-rollup-plugin-barnard-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1d3a097aee4609b15fc4c6a04bc8046148fb34d51616334442d6a7c9b927e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...