Malicious code in bunyan-mongoose-protractor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03fc5c0bd9e4ea7622a6c29059265a630fae7403a1e904ce875bc56985f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-got-gatsby-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1c2515faa0661243dc07aa0921b51680f5c2e85108869b41be9125f94fd56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-test-elektra-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58cd74dad8498f35be2b42b9cd2779b127b6ad45ea4954bbc77ce2fc2719d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-playwright-luna-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386e381d89b1d096d764b416362ba70740124f35f6bd65f19f671ca6656b8881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-tethys-dagda-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d94ef97414b28d8ff67854bcb4704ad14176df963449e87564a01e19d714d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143204 Malicious code in heka-exec-terser-webpack-plugin-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459a8911d404ea550d39c9a03962c94d442f59f3731ba158658f93ea0e9d1729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140489 Malicious code in castor-nashira-grunt-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142446 Malicious code in fetch-husky-europa-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec5ebb87d9beb9b2b0237447f6fb1b337d45c7d61ac2ef391f2e1546be1a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143285 Malicious code in hercules-husky-ariel-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c80ce18186d959135d9e2f89800afa7cd0d19f58ed2f29fcb81a3ad5114a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144016 Malicious code in juno-antares-gravity-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555ca8e4c5a3840f4129af13db2501cde2458849cb22d07cd346ae8a5cf7067a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147896 Malicious code in server-element-ui-aldebaran-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe35319a0e1502f611d4adf34672070439f01d604657bca8167ebf2b2aefa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbriel-install-cygnus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3984b121116c51f60b755a0d8e1f5a46665a65c3bbd051e40d65369d4d8d75cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147145 Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-sails-websockets-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f6d5f4858ab3c8a9dcd9c2ce14f334729ff48ad9207ef8a1e979a84de8d585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-ursa-fornax-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce1c16c26faee6a4719982db27d0f6c9f0f3d15357bdea35f8156aeb8e2745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-dotenv-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4bc932434479fa4e81f262b0c82cb63b971801af78eff50112834c003780c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-semantic-ui-jekyll-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d4e3e628d28d18ae33ed261c564433b0747ad9352364187f69369a139f24cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-despina-xanthus-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94066a462de6a40ad0b3d6847519d8baee54111207505b5664c8c283d362ff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-convict-indus-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7242dca6f6b47df2e61e95dbc7b3ae53b2eb59021756a5a4ff56352a8137a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-hydra-lint-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b2e5960bce8d385d01b183ea5c0ca4d1c4ca826535303e7e7c7c94726b6e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...