Malicious code in elara-style-loader-comet-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-morgan-gatsby-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554139500406b867d6abc54a5cdd58fd294ec3edad56fdbbece0f3987411862d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-thuban-axios-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62878091dd31f40a00204cee8df3fe4229ddcdc28f34c23574e6211e92f6ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-elektra-testcafe-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d45f11da5260377602e2a2dcba65f2ebc42a878b0040f31dd4e4a92f948efa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-testcafe-kinetic-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b35b09e0a0d18b36c54fbc73754302779000e4a4c2f94804e5e040b67669a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-lacerta-tethys-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daccd0e088b4d8b6d010fe3e21d6688a38016b3fcc3e89bedba46662a99af354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-sirius-nashira-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80839ae4b1e9d6b67291153829fc2219acb1002afce7fc3726e1d9503d4a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-stop-spectron-webdriver-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e35232b2768c3bb1baf79865a9e648987758ad19e7705710da8c61613fec77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-cygnus-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26599798d1f508b4a74bcc9c1d87ad759a3e61e6ede05b60fa179cf208d6651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-sync-stream-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272ae80d612727261195a18032ef87b80a908a41c49a641ecef28bc5ce12b63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-nashira-blitz-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28e21e9bf524cbb8a38981d8287833ea31e36be5c9bc62a97d998ddfb499a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146830 Malicious code in pulsar-europa-phoebe-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295747a3720de19bb03284339bdaca77166366a75fe88b1865bcfb4754f5b500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-quantum-venus-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65b610d5d796848b0303f14ea0b4fad513afe1272144ef4f17cf7e0a7b0f83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-run-script-draco-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7496f52ceb1b572a541bb3ce44c44f647500abd52b1015c97b8a6e7de1ea336c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-uninstall-gridsome-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f954fa08e9cfdc70d1689fbc6fdcbe6345c8f370b417e6f4076219b77cdbd9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149415 Malicious code in webpack-zenith-winston-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd50777e50a532469b958bf7a7553fe06e2abc0b0bbef40eda0e4ba56e523080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148736 Malicious code in tool-jabbah-inquirer-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c23f115a9c2230624fa6f80276eacf194a28e0e56c5b3d3a789f1e944714c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140790 Malicious code in cli-cluster-duplex-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf68f6b5a3c1515ddb9baf8daf27c3cab617523afea0af8495b163e358be257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...