Malicious code in websockets-proxima-commitlint-config-angular-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e49bf5db756a71cb524a32dd1875d3d5c56a3d8f6dbe7e1faf9d514bf41c684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-warp-lacerta-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dce56374fb88b40c9774518f1f30bd60741869f567c8a7eeaf5fd5b0024e250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-fetch-lyra-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629b4fa570a0d70e8141464581ed15f4719b44b0916381a26d46e3b4a2b7a6c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-chai-babel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d9f8282d541ec1f5afb3ae6868da6de795ba3b4d3ccfcd7ded668aa567b1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-enceladus-install-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1252fa09c8e3f5e289551c8ef29c7568a2f3a15d611100b3bc20fc8b90dae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-private-ophiuchus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3405904445531c7ae1d5711a260447cb6f598d121e2ca8ffcffe1a2aa7713f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-celeste-luna-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffe0d0c724c25ca5f6c7bd0c954b2482889ae6065c56568136b475e39442706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887089f1756813ee1281c518b378e9496822a0ef1a84f21866e1cfaa764c8de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144903 Malicious code in meteor-comet-mdx-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91345011c2e3f2e2353808a4c3cb3c3b00b13cdd534a1c0c4d88a87b9582e6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-polaris-rollup-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91d21a5dc53bc564d43fa8a35261a81ba823c57bd5edb97d48a0e60b3f8d082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146796 Malicious code in publish-nextjs-halley-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79f182e64fdaab08e0712c8d14b93f0074ad61ed9b5a6edcbf3f506b35260d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148731 Malicious code in tool-command-geckodriver-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d4c1dfd04a531ec9f0f8abdf611775cc1f6fb6b997f973bad24c056990bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148538 Malicious code in terser-spawn-pulsar-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd8919c59880550805cee4aeed65578bcc2a67d43429c99e7792db72e8671c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138729 Malicious code in foreign-apricot-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e13b73ccb7939868638c754e96a2bab2251c389df73460c35f160206b58c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked-moccasin-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eff49c2222392e2361052730ac141654db38b251b23e7af30a556546a1012e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour-cyan-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c067f8e564ef690a4527730e466bc3c9452d06762612d946d61a689ad4e79fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-jengkol7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493e2816cd3dea15dbcfd3ef6d0ef48cfa00640101c01f086c54a50b49e54969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lapis22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750c7ad2f253fe19c5c152ed80e091df00f3af838478236685937393fb4dcdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-rangginang7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbefead49401fb00de8b6bf654ee0f1de6f6311a1ff622886a6305600e2d2d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-teh22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e659d8e763af3321e9a07a299d59a557c63949c280b947f14e843e256a12beb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...