Malicious code in weywot-nightwatch-parcel-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf715bf25efa7cc4338bbd3849ea8c9c5f15eb3cd6d1efa2dab6d489b92b72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-redis-bellatrix-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ac19cf9480473b3ec73cfd3e53f3102125254d5ce5bd0626b2af5c9441c21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-spectron-europa-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109c0af3a14167896afac3e991da3b3f5fc640bdb673e433085122320a2f2b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-cosmos-avior-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5899306d9d0bcde819e00965d08912883d0daa0fa90a7376657327f9a6096c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-start-query-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc490646055a04b32e6ac80c29731adb0ffe77135199dacd712a2f500f6711d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-jsonp-parcel-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23bcd2e28f3cbf0db247c4c93ccc0d4a606ec4fab7f1500a5209e6bc140297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-graphql-pm2-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df4450f2fb42c74059bdf2515b13d9ec227be42735da764c21f0c090c58f9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-package-ini-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7733b7adfa5a5c3b062c7f5ae00e3f46238075fa1bc584aa652e56f1fe5859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-changelog-nebula-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7e2eb2f1733d25f25813a2bb01c686f23d859768bb8ec96a69b2309152b774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-remark-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b91250cf24f7949b14f40c0c24691e6116caa06fea0b5b25539c3f519bd116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-puppeteer-dactyl-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5573cde9eb7f58c50db9c8a3d2f003010d9e86a0331f9e8cc3f75dd851d1b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-concurrently-subscription-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83b2e12272a8e785079ce5d459cca1a904c1e9310d88115531e97fbf868592c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-spawn-galaxy-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43b63aa9b116de12f98fe72753cafc805de0801861e451fb794650f62b8952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-child-process-mongodb-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0521d8f1c77a106749e2b261ebae8d051bf9972ef5fdf1cef5a35bda7c0dae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-cors-concurrently-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8121f3bcabf23a54ce9586482341eebe56d5f0699a7d633ecd0839dbf98e468e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-yonder-betelgeuse-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c945f5dae18315f4787680fe0df2b8745a6117d6af0a32e4b1857099ceea2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-mensa-publish-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003577839990280047a1046223cb273300b3f2619f3543ae9904c38dd6fd630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-meissa-kaus-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eca9100d0d234f4e9de5100fe27255c387d9e90e576451cc687932b4771b9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149494 Malicious code in winston-gatsby-zenobia-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4539e20771a5e14a396382185985a89fdd823182f16cf3fe399f24140d7e8c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-nightwatch-materialize-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b57024abaa761e941579d15f45be33692fba1760f2c211ca8d954ff023419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...