Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-sirius-phoebe-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628570f78dfeb10010f186a208895ac420fafdd984bc72f60702a3a961e268bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-event-blitz-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766f03cefd972d44198c480800afb0ecbe61155b28ff37abf26a9d7aece78ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-postgres-algol-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c904c75f2daa11cbf3ccea2167b46a840af6a20f253a4d8a2b60fc1576445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-cross-env-csv-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c342fb3e60fa2afceecf9082d7c1b1dea1e6af2b2fb452d854bc52c3d7d9892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-telesto-mongodb-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d88d5da820ec71695787b9067c57f839dd6f8d9bf7a796481527698196c2020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-avior-corvus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d479fb7ca74832c2b78a20baa9d8e3c6bde1afd6816d629f5ea11d482c9805e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148114 Malicious code in spectron-docusaurus-nodejs-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ac08c543ac3751fb7a781814ae801d51313d038a0df1a8e71a40a06550122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139712 Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-lint-lacerta-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33c2d3287d40f4339bf093b2d26b8a80cde3f8072b1e90380aac86050a0d518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-vega-ganymede-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba68ef1ecbe1a9f3230f0d417d74740cde111180171008aa80948ac046ba77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-firebase-jabbah-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83963e190ee16a0e46c3d5d97c4e3e65793b6f16cd4f7aba6809f48e59ffc509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-schema-alphard-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a9b936ae6b74c7d7229c33b08bcb2aa9deea6014c2edfef4494e291ec250af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-scorpius-hercules-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cced6cf8676b69f036a495586920fab0e693e3adf879a822373c32d0416a7032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-vuetify-regulus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e17cee68eb004e87c9a313b67a9f1a16ca7cd3689e90a42632fe0a3b8157b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-halley-pavo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d80adb8e3319f874101402502a070ecc2ec48543eeb374138509cd912935ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-fornax-lynx-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b749be36ab86f788fe452e755ebaf3819040d43f2414804a0c51fa8b1a86289b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-heka-virgo-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840c87e2ba9ce27cff91ef872cf38e9c82b5182d865525076fe53fc0b1207117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...