Malicious code in xerxes-nodemon-test-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191a6afdd1eee981950f29cad59759e49c40cd8ef34c6d81b52395578bd2f617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-quasar-centaurus-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e3f8afe9cd02566afc8188735a8f9203d9a9305958c4124e46a4816455542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-betelgeuse-cassini-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de30e4d515c90c8d81f0aee56858ae6df343a3a02ddf287cc29b3b20c1380a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149332 Malicious code in webdriver-manager-private-helios-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7081f24b37a858625c177c44edb0282c8634acf916b9c19196988d6877ccb140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147844 Malicious code in semantic-ui-dione-graphql-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53702f4357ae4812cdd90f852efcc1e208cdb37c1d724570bfc11046a3a0dfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143457 Malicious code in hydra-socketio-fornax-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4cfe4008f63bb69f79d8d2d28349e6ac22e9722c9a52f41d03bddbcb3ffb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149085 Malicious code in vega-callisto-apex-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbed3cfe68e3a74b472ac88faa9c8d2bf8dd3dd2614d6a118bed34e17c7d1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-nightwatch-aquarius-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a16ba622475028f46340ba10cf929865e0a4cb88b18410fd926a9315ccf622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-lynx-shelljs-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421aba0c6e8cdabbba0a85878f1c17d8ea519208d6f0b422f6bb04b0d42b6ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139889 Malicious code in backend-hyperion-nightmare-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dadd36e483111f17165d75b5035786bda47fb520be9a446ac27bedfddfdf54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140357 Malicious code in canopus-ceres-start-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6cf436c849d3590009c01fd3be1f2292f845175f0191375f358643d24f99d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-janus-spica-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8df0cbaee112cc2fa35b1b834732111d81069400cdaf6f347189357c40e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145673 Malicious code in npm-alphard-mongodb-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95542288931cd3d5d462529f222d90c0fe40a687de3fd60c6d1dfbfe0ded262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148604 Malicious code in testcafe-sass-loader-morgan-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac300cbf341a439102ac5de910036a209bde2e17e4223530fd3be37228557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147831 Malicious code in semantic-release-loglevel-mongoose-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141338 Malicious code in css-minimizer-webpack-plugin-yaml-sails-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36f379c02a4aeb332557421581ca50f533617fe1d1ca4205afd44dba60103e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142738 Malicious code in fusion-jwt-eclipse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276ba37349ef51c2496f3657d01bc7a3a3d0a9152a6d37a144b42229df1956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149385 Malicious code in webdriverio-telesto-equinox-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1350f6b3fe53b352c5f1540c2f4c83adf90f698ea739e790969583955c89fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149278 Malicious code in wasat-acamar-fork-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e19bafd009a01b2b23ed912abd7ac1dbcdbbf45e8f3b3d1f2df9375ec17703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...