Malicious code in levels-adonis-wezen-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13590a8fab2724a650de948c25556f1e51813c92203258158aa6286554dbdfce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-nestjs-mdx-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ce2ad2c09a45b1508ca38300e78b59601e949727f7b0648dca843a9241e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b1046da97d6e7c83170cac3d306570016cd8e3b7315de173d686eb7a2bd2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-webpack-pyxis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994acb7375c148cf98fd41c7d4000a60a96427b65948c9d9840bf97226b652b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-io-betelgeuse-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b7ad259d79486b5eec821e49788722b5bff497f8471dc329e58af138fda0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-dynamo-lyra-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd3577ae452df631ceffc6b04b9bf8055b4794ac4bc1c794b37786a83638dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-dorado-phoenix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c06dcd35b1cd056dad87509186667ba2544e0b69410c71587604ce328274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-oberon-tailwindcss-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c4502aa3cf663ce3032721cb96acea46b65f80e204337edf55f20827f6328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-magellan-sagitta-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daa5ca770f65cf9f926a2a05bf541b135aeca414fafdefcc3362e1a5941c1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-izar-resolvers-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a98268bc4d6827717267c3f7cb7dcdb135f6828102d3a638c513591381dff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-cypress-barnard-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102adc00966ba285ca48a5b0c9ef6bedbd9b1c15e55c5c56f7a6b132206d191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cosmiconfig-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-barnard-bellatrix-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca1529eb0cb56a1c63d39df7055256a40cc90641a5729e731162c15c16e0534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sqlite-jest-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de74ad8ee89a869c6221a33e7a592b0e66d6a662038277005fee848e10a0530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-fornax-dagda-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a30f012f70b9c04326a3eb8049c9458b8986a6a78608bd59de0d84977266c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-publish-gemini-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c346999cc24172ed14d568998d9240bf3ca1888626c6c643f1881bc8aba87b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0855a6cdfae8e1670a3485cc01494e3bbcf29db65d753f2584e2bb3c06e422b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146297 Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143013 Malicious code in graphql-vuepress-husky-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57a037cd8a29cee819de1acda0627ca6eb3dd4baaa96f2d401b83c8f7846c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...