Malicious code in loopback-mensa-chai-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01362edbbd4889b7fcd0958ff4df6d0c1e3cac1f61f9e9a762c6f9b254f4c359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0b021a09de30d4b323ddd5aae4aff53aaf7dca04abdda73e5418cbb0514921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-dactyl-ini-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf395e7b3693a939d7ad32c6e4cc5ae06e04fa347b15775871942a5e6c28d16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-galaxy-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02934da1a26beaa527e0dc78a17b97871abc9faa5d6644b390f36b5ba820093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-duplex-upgrade-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea0537e1d4f6441625d140f225246350b2f419c999df9095d0aa0b6fdd48e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142862 Malicious code in geckodriver-css-loader-transform-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f78d7d77f3e696991adcac5717ada6171d328e0dc9af25c717170d0a10828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-cache-chai-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd5e75f1dc520c9e3c5527da3ac7c209be59d8b37027452fc635b60481ef591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-meissa-non-blocking-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1ffa2d0feb9939952cae2a8669809201b36d19cac0a1eb3a886e820fa1ff13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140496 Malicious code in castor-spinner-async-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7ffb45dc2db3ff1f356c7e393e67f1de1d339af5165815c7bc65a9702f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-pegasus-xenos-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c2051b79f90232311e21a77400bf1024281ed15567f280e1ecad0578366fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-oberon-resolvers-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643f07dd9d57dab6a0026c421c766bdfaef2aab35236f4b0373b185967b47b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-exec-umbriel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f961ce0c9fcf488462a54c9cff34ad6de5a026e596e381a681ffa5e5c0620582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-neptune-mongodb-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0c9e74444c902e017c9e52faabf35b6437f9bdb1cb60b164fa400e544a15cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-configstore-kronos-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6152d31759998ec7f7ff0c7f7625b2df797123c6f92b91550da3d5be8bc0cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-node-config-prettier-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38125f8865078f53318f1d7935b87aad45c4b1dda28e2906a20fdb84ff3cf22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141380 Malicious code in cygnus-standard-apollo-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d60ec031b81ffb48378ce94a8bb54350c86dbabe71fe1e95d3463ef3400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142056 Malicious code in enif-postcss-winston-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1533507afdde1c630d91d547a384c87d91285eec2075de760eafe149f859698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142740 Malicious code in fusion-lint-staged-chromedriver-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73015639cc897932af9ad7c829ddeef34a0feeb617281db2f41443a5061d8516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...