Malicious code in scripts-concurrently-grunt-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90713be5a6b07f12ea3a0a3307259d9d4cca964d591bf7ce254508064f384e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-dorado-webdriverio-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2904272d156f0b2957cd0ed514326c046b100b1bba6c0fd4d6d6748ba4a431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-iota-testcafe-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1560b6c8b722d09568f71ef3cd851c6896f97b12a95429813738ac245e8488f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-chai-deneb-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9fb6478dd3638f00e16753a5839c017c4696e62a8cb64c5dbf9b7518f59cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-pavo-meissa-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e8b50a01510c3c6be8781d310dad533e91a7fcbfd0957dee87343c3186492f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-deneb-helmet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-graphql-figures-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45612d2418157df1b47f3b420231aaaf83a4363bb4a5c2aa3eed9c095e71deb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140051 Malicious code in blitz-magellan-betelgeuse-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5f69b47cbf03defc947d8b791ac97a071f76257cf87a5173e97303e7d827ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149138 Malicious code in version-janus-hyperion-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427704e8c1914d68ba387b56c941a250f60c48b69b5a5441fb65e0f26bbee07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146973 Malicious code in query-morgan-thuban-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebe6c980c00fa33efff3d178e6e90aadb55e1737e9f3429f9ee185c7f6fc816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139305 Malicious code in algol-prompts-meissa-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7444d1efb910638a58715c22822c78fba1ee61e841b95a0f0f846fd5a6529fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-resolvers-regulus-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409c9280aa687fece421d6f06022969bc704c4e4883823547dbb67afa933118f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-prettier-stylelint-testcafe-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4618205a87f80f36fc1c5ffab89c4a7f8851cef1fd278fc5faaa3a56cd859d8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-thuban-child-process-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69434b1c25dc4427b5759fbfb809886fd0b6b03c34ae3d2899345893727ae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-algol-playwright-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c43ed5687be2badca88dc4e652ef0faeefa17a6e276273db7bd9df6ccfee5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-shelljs-buffer-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64623aaf04619e9dbffea237cff686fd3ea843cdbfd2893241c7cf8b3430d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-lint-carina-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6a0b0e0492e54be0c5ccf4982364a7f1b1ee30ce12130b78d9c94e8f45369f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-atlas-passport-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c316ba24ee4bf53cfaa8ce2c315076b48305c248711325116375ce2d8cdf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-equinox-rate-limiter-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830d11bb383e202f127224d082db8697943104502bf0c48ca97a4f120141df74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...