Malicious code in xanadu-callback-request-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-tailwindcss-kastra-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587b9068c89edbc2f8b21cff50936e1ca4e6130d24272049f5bbaf0ec0f0f50e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-pulsar-epimetheus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e11fb22440796e42a2a2d5782333373007b60a5795efe3498f6856ceaeaffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-xerxes-less-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f77ad82d11d28fe06dda99aa8669bf376292cbe56864e2823c56240c757942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-chromedriver-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38463c47407d09bf309bb475114bf425225d02e0c4eab573150ec4108c4a6396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-castor-jasmine-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dfb0018bc45bfd3c2860fceb53ca07e74683afecd202d9deb97e51a929500f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-umbriel-jekyll-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64b6651e51a47b909829cd24191a6840bcfe38f5587f4746bf95f39bb809792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-venus-test-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4201069df227c6ed3a83016368b73803b06102600a6f33fd00fa86c969fae75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-library-markdownlint-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2dece0d15234a8401aee03b6b62a2d4d8b63b270a0d0f6633032815694f489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140345 Malicious code in callisto-playwright-publish-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bea5b7884fedd3cf87fa9645c779ea6d02be1f8048fda82a3760b16b90d937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149310 Malicious code in webdriver-manager-bootstrap-rollup-plugin-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7bbe5e837b28f9e4274f2918f25ddbe0c195af41f7991b59ecc91728eff530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139494 Malicious code in apollo-await-europa-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a7514dd74e4526d98056ea8c49af7d439e92bcb204bde01f5cf4fe3e6e845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144660 Malicious code in magellan-rocket-chariklo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e00035575eab423ae3e4685949b497d9cc3dff7e8691dc1a9cb608ab0565d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147107 Malicious code in redis-juno-restart-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1529634c79d2d596ca99ca60a3e80f312665dec3ca32c4a8f9cc1e4968848b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149518 Malicious code in winston-ophiuchus-native-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936180fb7f70ca447bdaa3801548797677e77685b3a6bc1e6ae6806bb2207fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143297 Malicious code in hermes-acamar-pino-pretty-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f910abe8927390314d9dd02154054f3ca7651d75fe2efdae6636290baecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143513 Malicious code in ignite-foundation-cluster-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb52fbce56457da73b244aa99a6b150c5cb9e86f5e67a9c67669735cc5e26b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145883 Malicious code in ora-europa-tool-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e006f42e194527ca2cc8573e612feb59b34bb39906c9d9544474f1576887f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141490 Malicious code in deimos-comet-ganymede-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef3a69785ee560c1abd0a6e38107477d33b1462d52e8de5ad903da881e50f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...