Malicious code in got-rocket-build-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028b8aa4f6185b93d879053833468fd2cc925423325abe587d94abab54db54f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-development-mdx-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be606483ce990fd7946a1ab9f548c56f96b7334025b544589d5e28733ecfd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-nightwatch-auriga-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ea1f1546d21c3f5b13122ea4150fdcc0800fceb20f7bc5ea7689a4a9b2cbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-transform-jsonp-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eebc16db6952b19d5daf098a0e91751627b8bea0d3fc10c37376b8ca1d6998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-luna-mui-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da8a6cbaa4b88efea706fed8ea3eff0ad632e8633ca495527d4e6a2ec5ebedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-stop-aether-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc07d6adfa8c2639fddeb3a5293bf6a4cc3c3acf30f84c04dacd7f8b46a939d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-terser-chariklo-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23b79eed8301d5dd64081b506129fa0dd8086dedc7df9b4ba9d963e3bae94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-magellan-server-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f2acec02551e19c519fb08429a857027f87ac2d9ae888c056fe99dc5cc9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-playwright-publish-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bea5b7884fedd3cf87fa9645c779ea6d02be1f8048fda82a3760b16b90d937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-yakutsk-juno-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7d8857f1269646d020d61a230349856e619bec10f9307c2ab5843d8f509f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-build-commitlint-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdd3e069afa219b7f200c4de2044062b61cd5636880c70289141ffc156b82ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144343 Malicious code in less-protractor-nebula-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9408abe13d23077284ee2775377bab10375093115e0c5e9a2cc15760187cd65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147345 Malicious code in rest-docusaurus-xanthus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b51475e0d0ca1aa3b5682e8e921a79c3fd824d58ffda5d2a89baa2069c373a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaphahitqq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22bfac3a31bf85f77f63ac2d1004c7779f42692ccc4b5f0f31474282377192d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140681 Malicious code in changelog-rollup-proxima-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbce01fe12dee0ad06db12fcd44184e7a2fa4e4ae51be17a138168babedebe9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148006 Malicious code in slidev-io-bellatrix-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0d4992318581ef24ab6d35f823720615179955fd0c5aff8c9e63aae72f5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145268 Malicious code in nashira-betelgeuse-server-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114e106d1af305fd424f041b938c63ed588b82a0134eed432a6241a89e0288be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143316 Malicious code in hermes-enceladus-commitizen-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f766d5ff337f93d816e6e76ebadb6d46154771716ce960f02b416fb7c476ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144762 Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...