Malicious code in chromedriver-csrf-ariel-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b7bcbb5c91af68f2226ee73e0f82d0975d4f5cb57c97087eab99276a369e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-cosmos-soap-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe0f54fbc6915846fb2b13a32feffed132c1645ae6588717350c5848deb52a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-kastra-fomalhaut-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eef0a934d73d0ead1f154332245499d61fc033a2baefceef76b244aca28fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-dependencies-ceres-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d28cbe230c506ba0aba3b74498c279a73968c6d05ca9c736074a467aa0bb9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-fornax-dagda-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a30f012f70b9c04326a3eb8049c9458b8986a6a78608bd59de0d84977266c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-cypress-nova-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4314605ac8a292040082df3767736ead396067f88d0193a18f4a19f922f5119f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-hyperion-mysql-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bd384abe5841ac7d284915b8d92b119b617ca2c97fed9c70af39192ed3887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-equinox-ceres-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c2805a9e6173d86763438b0da3f4653180b81b634a3827c6a485434b559067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-reveal-md-react-bootstrap-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279aa0e60f46495584e2044891a57e17d52a3fa040efc26a9c9574b20e260df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-yaml-scorpius-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2496a24957ff71903a6f70a9fa37c5af9b78521998cfd57ccd957f3b92db8539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-jupiter-zenith-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195f7119f79b9010d1b15cbf53b4ec46996086f8d87b6c15ed3b171a977b0549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-quantum-andromeda-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd57197959c002bb3f2c34384d0d603abb5da34acfe5db2fadf10e630b6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-venus-install-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2229483646722536d85ff104226a170ef6e531b8eeef988858eb5722a8adb0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140268 Malicious code in cache-chariklo-gatsby-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922d2552b4fc45a9980f353493ad012a5579a62b6fea2ec12c4de27f6169c5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149851 Malicious code in zenith-gacrux-tethys-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7db5be699ef4ba8aeea257073baddc1b5f80270191b531880ceee13acc8a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149055 Malicious code in ursa-electron-builder-helmet-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dab14f9c372453cd1539810554a152dbae1521576f8135bd17dbf90b01ab50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149137 Malicious code in version-iota-deneb-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b339f0fa5e97e5fa737e9c1473c0476739056c2201bb00ed06a6ac219603328a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140000 Malicious code in betelgeuse-registry-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4043428c8364873adc4d1b86cc8efeaa27853ac5456f63216930f7c514557f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148416 Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...