Malicious code in algol-chromedriver-pegasus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb003af6977922f52dbd2f8ff8af98ba4dfdbd3b2d6c2d8b08d9791f43110a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-impulse-taurus-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350fe70b5ce34a808024895d7588ccf625d9851d8488c0648e6ae9a610babdde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-subscription-vuepress-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33217d1af956169d2508fc5394110c19795450f5fee3645a7f354e8e8a24972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-hapi-graphql-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe863da11e1bb254e980e820a2b5e550876aaec7d97240823645a418679a9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-procyon-apollo-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42e3571477042a427ea800803cc8cce7743f22a2f72d8c43432ac8fd4a5c96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149352 Malicious code in webdriver-mocha-leda-prettier-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9c40bd189308af9d096158546c41235af4d64a9533a3c0634155efea9d4492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144848 Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145789 Malicious code in odin-auth0-spica-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e2a02b14f805250844e02207a8da2c9897a344b77ef90b326bf6fc029b0590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145996 Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-winston-eleventy-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3789da716c8a1be224410add54eccc97e3ad9bb5561c3a3d9326e119826c914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-puppeteer-spica-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c91cc0f7b3784492f428d41a716eb3d3b4bd1739e61db8769681c5e6d90d167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-cosmiconfig-postgres-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6319fc0d1ab26e05d79ba80fb8c298fe6937053966ba3ee8ab9fb93445e51c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143590 Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-chakra-ui-delphinus-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f49181e79304a55829274d7b692031d27c57deb4690a3a3e3c7c977092f86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-pino-neptune-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdb944f658ed68cee18e920c32f8c3cb2c9810b5b8551c7e42d18eef82f85e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-remark-sadr-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55198b1951195c04b8787ba7ffbd4ae734f7ff221bcd530b6abd49b8e709a72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144004 Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143769 Malicious code in jabbah-astro-update-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d05c71d4e664abc9f344c8ae0080f7d1f437b56a3bfa83439c01a3b1374b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145846 Malicious code in ophiuchus-ultra-janus-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5605f667666e11bca911604813e36388a35c57160db80af8971a97b27fb35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147624 Malicious code in sagitta-triton-rehype-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea9e88f146d6b0efe702ff462980629d348841c722177bdf682d3a2766d719c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...