Malicious code in playwright-mensa-build-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd565218ad210ae83638b08826afd3326949158b5c7ad8415737c705310ebae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-winston-schema-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fac4ee9fecd205ce5a6a0d6f2d2fff5c73dc9b66e1cfa9181d4316724a6a246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-rollup-plugin-pino-pretty-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fe62b6fcf916ddbab500c08a99898ec65b9eb1a259f6363bd0e30f51ffaf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145234 Malicious code in mutation-telesto-mongodb-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d88d5da820ec71695787b9067c57f839dd6f8d9bf7a796481527698196c2020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-development-meissa-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b0cce58ca27bcbee4953b748ac079795ae9012a13e66e88460614385e7f92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-perseus-lyra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e87733bd5fd700c182b2fe085a507461f9325ca6dc4644112ee05a9b4d5f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-tailwindcss-cz-conventional-changelog-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e92db7dae7fe60b036aa01d617d1fd2a1796d36377e1bd079809b62a7add8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149149 Malicious code in virgo-backend-hermes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05940c7f294c6b60ca9948a699c21c99f5ece74f5993de0fd374cd1fabcc5464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144030 Malicious code in juno-loopback-tailwindcss-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed40b84ddbb296e2da31d1c24d9acb00f278cc44f7ec2cbe040a1547517e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142601 Malicious code in fork-update-stop-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5331a6d75858fe3170dba64a50135d689c71f8234b42cf0dc3368ba3ddfe1234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149485 Malicious code in winston-changelog-dotenv-parse-variables-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07107ba7dcac3d1e832e3cf8b57b85c3fa17c4ebf3a3f8690276f30a26886d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-google-polaris-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0301889cd3284c9ff6e51b0f6cc4788055d9fafeeaebd71b19ab0eb2888869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-ivory-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd790877abf20c0be41145737c373e5e0c49bdee0530f9deb3514e20fbbdf7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-nasisayur26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e1fb31482e5daca95f5b743a431cda0b572b3d7c179220f85d3803ae00a9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327f191f3983ce5737995881e7c322843b01bb5161cd3b31a7065858bd6ab926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb3cd2c459a4951c3807f25581927910f566a0481e596a1e47eac8b43ff5d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96708543280c285b9032ff937771da38bfa63bd61febf6c8666cc1966d29a373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135342 Malicious code in magic_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b795394bfbe606b74522fae353412a59175c831336324d122f9973af341b9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135195 Malicious code in lina-rojak70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86099faacd31a8438f9c683ad22fbc4d4f647aef84f1ee7975867244832d5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-asinan31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7808529f6ff8f0722641419df70921db7e71a533a1212b90d79f64a700e297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...