Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-chromedriver-relay-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f74b21b039a5c5ef41693837010939b6ffcadcdce374774bb3bd6ea91e4e134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-postcss-phoebe-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0045106a7c2a84cb437a40bcd035adc53aae2e23c51b66117eafc2770f0ac1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142767 Malicious code in gacrux-google-build-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e1026076b8776a5abf64629bc49bf72b89ae170bac59cbe6d152fe94085f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144450 Malicious code in lint-staged-dactyl-optimize-css-assets-webpack-plugin-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fedf4b2f7d5f9c62ab838cb326ef31ed83b2bf95b02afbcdea9f615c976407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142737 Malicious code in fusion-jsonp-solis-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ab6db8e999cb39a39729af5903c86fcd6c5d1a9f6f9619a848337bffc56226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139983 Malicious code in betelgeuse-hapi-dynamo-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a35da202899a19f4d2770c7c1cd9956c0a0b82316c6be52a6712a1fbfb1568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147799 Malicious code in selenium-antares-lynx-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876c68a3d2c4f2602106f0e766fc2686e77169dfdf55d2f6bfb901effc5ca57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-aldebaran-mira-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38304ad9ac9cf5d12c69ffb1106360ccd3571f8ac251eae2684948585e5a01cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139158 Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-ivory-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82eb57a35b29af05ce640fd9f792f96f2540ce409d14ad557e0b3bd7043045f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious-amethyst-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2688efebff925b9851742440ed5acd19b2c047b4b48da253d991f44c00185c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-beige-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076b5851dacf23aa7952819d3faba5c101e042512f09bd607d2e86d9502b15d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2e3a06f2ac94ad01974eb30aa17a11509ebc2085cee8cae5e776537dab513e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regional_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae63197bcd6827aeaada2b44a87c47ff924a5344a903626bbf42a8280521647f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elderly_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3cd2f998d4d66380ba7e410ba75cfe938b576e7895d0076e0fe964dd65da3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135970 Malicious code in ocha-telurtahu56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5362859b605d7ec1f6da1f5ed369fff6867d828b5a857c129a6071428fed4686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133780 Malicious code in gita-ikan1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a8cd669a4f7d4a158f3261347bdc8538f20df964b17e8781e37138336117d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134629 Malicious code in joko-kupat65-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35936db8df1f1a10ba917130a5e125e4cca2666d408586eb345ad1be706dbb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133111 Malicious code in erick-botok92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b70864e7e3475129baf766e0308c47ba4fe430d7cde341cd171918b4e93ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...