Malicious code in transport-playwright-zenobia-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c79d7663c95b031b90b984412a77e6cb307fbbbfbd3f9cb51a1ef7206d484b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-loglevel-meissa-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909e4c33893b2a01e7ce57de10e579ce8302c27633a661dfbed926ef6435f9d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-foundation-mocha-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4504dd92274555fec52a11e4209f610f222ddd78d1a95312070a220335e6d8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145816 Malicious code in ophiuchus-got-perseus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db03ad94a523479b2eff4c7204a7b1a786f887f15f2a953ae986b77d962c4be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148740 Malicious code in tool-link-hexo-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ace35aa042e4c1e8ce0e8f8e3cfb3e9aa87b4a5d850a6683fe0482d10d7762d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-concurrently-grunt-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90713be5a6b07f12ea3a0a3307259d9d4cca964d591bf7ce254508064f384e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-protractor-lynx-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0777c52ef5f09972320dcd393bc8cc30de3e52c2794141a8d80b22c22325e465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-parcel-helios-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca8b68bffe089827b1bb978a267e2a3fa9a7fa61f0fd932bb4bee41b458a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-yonder-wasat-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ed24e27e227c31ca5b8b56ecb0418c407903952c4a6f2893bb942e28fe75ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-metalsmith-reveal-md-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f19ad3942aa64e870b1cda93f1d3230e067423845a5b4c5d84fbd34acaa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-writable-farout-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92cfdd8e9ba325f1984bdf4531e1434e357d88a197cb1fa814f03eb07ac4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-farout-xanthus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3c95c10dd0ef23dee9c5b68f961b0d2ae11c9bb1a7180844f016acbc486a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-regulus-xo-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f0ecd50ac91c36ba79eb6075ee122df6de1bf11f6408f38cf8f4a85d017fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-algol-perseus-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77664b9a0fb1e6506cf3e5b1505a16bda73fbef3380e9fa57914417417763e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-aether-mensa-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045aac20a790e741d9cbefb0f063d5632d3512ec278156db660664363f032c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-pino-pretty-miranda-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50277e8503056daf632dee3b6f8e95f0bd81b20434b0d5b3fdc14f87eeb96cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-winston-json-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7ced402c9f3523ed686f438c023726ebfd93a97fbcf9f8146d5a2d75988d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...