Malicious code in package-bunyan-uninstall-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927e4554a71f66a6a4f439906cade05f79691db231a52561db5eb5d1eff4627d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-eslint-plugin-postcss-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0531401803a4a5dc24d00495ddce8dbcfa848942851ec09e9616e99dce22824c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-zenith-gatsby-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f848a04c62462ebd013014e94dcd21fad1daa9a9bf0195d04d8e99c9c335dde0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-wezen-html-webpack-plugin-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b5af772803ada032750ec3f8403347e7a424e0ea7df55a1c9aadd26abc0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-transport-spinner-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1d6a0636d5218446d56d763786f84428863756f135aa1a6dc761a0c94d774a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-jest-await-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8f94094428f0a2150123a27e6aaa31f5343d172db32867c1deedd1ffd7de9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-command-geckodriver-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d4c1dfd04a531ec9f0f8abdf611775cc1f6fb6b997f973bad24c056990bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-rehype-deimos-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ade24bb378c76c036b71f2cbd39bf86692a9c9c7c9737f14ddbb3b7e65e841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-antd-corvus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abedf822a8547ae8ecf50d68853589a4cc4cb7fbee11665ad0ab235d5085f9f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-kastra-webpack-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da31a94dea166f9732544d8bc74d15fb23b8b8d49f3dcd8465de86a7b8ba7022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145078 Malicious code in mocha-graphql-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863ae61cac71de360191dd6072306001b2bb6392cf8b16e63c7085e2d018ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143180 Malicious code in hapi-cordelia-nightwatch-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13468034b470d0d147c580c9399b008752ad04b2ce9f400acd324b01b03c9a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-playwright-xenos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5f310b893a67c3d52cbcbf20c0fbf6d4ba00816213bf8a73618b3556d2d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138709 Malicious code in exuberant-peach-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e30dcc58bddca5b500b777db9473dd477874723af2637af2045b58fe4b702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138628 Malicious code in concerned-purple-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b137d122756efdf5afc73f3f7eb9c119ac13614e4a434b7ca2ecfa3435b02100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138764 Malicious code in growing-silver-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e2971fdd0ea036da285899da2c250312bd97016b49b0507de0adcf3f506817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138804 Malicious code in innovative-lavender-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec72f5bfba30e96c51554845c6a26c1f998f5349a550828d2379a1dbe7b91675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...