Malicious code in await-less-xo-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a504bf7c4d1d9c1665d27175e7e303cf7a0698c8d6828ee8a8a07fb9acd4304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-gacrux-pm2-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-private-module-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc66d2a257a4cae15833c68e90d0d126ae595afb14baa589948057e3b8b1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-luna-cassini-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bff5db309fc66bdcbce4dd897c9cf87a4b39740f19b7968ddf67e33dd7f4a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-webdriverio-rate-limiter-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6e464d4d807b9eef9069ca788254eff0f8533e1006b633e282f18e6af6ef0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-warp-perseus-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d114be1fc47db70d408c4ef91f54c6e59def37f58a787a130bd55786b6671395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-express-winston-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cb9380fc2279a2d7bab2a5f2208132c96756e49a3ff65b6adaad83cba410e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-run-script-kastra-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9330f8382414519d87d54d1c2a7975ad454615e35b28607ecca8b6e78e0e8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-draco-install-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a5b34621d91badbb35597cc0066688eb1f06fc4523beb956356d0322803b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-standard-corvus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684ec4b83b999e47fc32ae82653f9e30c77edeedfd6d936996de857e670e4d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145507 Malicious code in node-config-flare-elektra-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152e0f9d53e98bcf6b041b29988e6f2da083d076da61a67d8b2c48005d4b7d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146625 Malicious code in procyon-wezen-html-webpack-plugin-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b5af772803ada032750ec3f8403347e7a424e0ea7df55a1c9aadd26abc0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141866 Malicious code in elara-canopus-markdown-pdf-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38843c29d07813f9a3cf2ca91391300a174e390362663776247729b76a079c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-aquarius-selenium-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e5c2af9e703d23e07f831f6ce27c38ee3fc7977eb88fccce182c8f6d1b82b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-markdownlint-npm-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73e26256761af7533779186f15b847cda32f6523b5e531c46bdd00586275461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-cordelia-enceladus-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b8bd418da80c790ee8e7a2408a7e231eb7d041e340392fe401e6336a6b6c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...