Malicious code in spectron-webdriver-global-hugo-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0774f043ca22cb36ef2e6caaee3ed61aa6c9a6adc9279706a1d01ae83d397614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147374 Malicious code in restart-changelog-heka-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4e9d744ae94327c698804fe82966dbc2351c5296bc154d46f1937541b8f1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139978 Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe0ed93a195f1e90b9597a17f9ae38aa7a191ea284524761064ec0713b9439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-europa-europa-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9201a8ae28b36901f0f929d62fbfe5f88ec9a91633f4c6726c8a2c58510b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-auth0-xo-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b26664e016b9ce769434fbfbbce3b3a7ed799f42d2c8b2848fda3fa7fc2cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-miranda-ganymede-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7c44a3f1f3f88459a634ef82210b6a54688f79caebaabeac104d6283abd826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-achernar-helios-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78d836027b3386068716b796b3c8b1931f3c424a999bb8ecb693401a1ff21f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-morgan-gatsby-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554139500406b867d6abc54a5cdd58fd294ec3edad56fdbbece0f3987411862d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-schema-dione-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af9e6c2b2b4d710d8a1f6df5d2630dad09faaf289798dc90e320c66da0f8106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-semantic-ui-farout-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70468bbc99ee37949bf80e5206f0f716f5e6c1e218fad639b36f4c6509f7f251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-init-protractor-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032e8238a6375ae58cc650383f15b3bf4e597ee8fa88e72398c702acbd328810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-gatsby-phoenix-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35784680b56a34e605ce149c9cfb50e108268e0841aa302c3aea60dc7460f7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149513 Malicious code in winston-neptune-vuepress-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b712155c96b30a4ed41560b5bf64d0a1e0d4bf7ed6f5d00344ac8204ffaccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140568 Malicious code in ceres-hydra-rocket-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e19fe3509407b837afe1cba9748d532e71518ada637a85b02b82a2f65b2abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139981 Malicious code in betelgeuse-fornax-europa-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12df85e55e17f239ecb02ac68f2e4aeb2274a82da624b7659364d84ea6c5165d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141476 Malicious code in dagda-magellan-cosmiconfig-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42085eb6a4d290ae43995ee4eda6a85b47dcbb6ca580e2965afe4b477e91b4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141025 Malicious code in config-gridsome-rehype-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3e9d295e11aba56fb8c1aa2464bdcc78ac712308ed1d341483477311ad06bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140638 Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...