Malicious code in query-scorpius-meissa-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039f8688ed4618719306a36c9e5c803751ab0b749811306decf282c7cdad2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-sass-loader-eslint-config-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227693d8b17d578c1c34349d603a818d74e794f02ca8a1c07433517135530db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-nextjs-cz-conventional-changelog-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3bccbd45c710b8f6f1f3255a43b78cd7e70beb6efb60b17e950621c6b86d8b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1870c7f6969ea7f977b1d82de36603569644e0ace11ba6eb516e75c0cfa8893e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-hermes-supervisor-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ed3ef202182c8794d3913afa6b9880d212ad731b141c6a92437e1e35b1f213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-aldebaran-betelgeuse-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f931c6a986c413378aa543184df78de854ec169ccb0a68ffb6399b50edb49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-chai-hyperion-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79d495abb6c1e5b082bab2c49a939c1066d9169d018a55eca80c287333b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-playwright-sirius-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b45bedbf93ddf35569e377ee843b9f2657b598f470050b225b0d8b52c953834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-bellatrix-electron-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bac72ecf776c1adf3747f46d0a9eec68e308972908ccd0b243c50ae647139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-webdriver-mocha-bootstrap-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988ea1acfef0fe0dbc0115af5b950892ce7e7ce4aa468ac0006e0be8a6cb6950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-kronos-arcturus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e4d96be919d586b8b15710cbae4a8827d448f68bc93f2af7fdbd94ccc46b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-transport-delphinus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0fdc46c42635553bfca3774fe744b2f18d608d3c3168032ef8cc6d1e097991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-achernar-rollup-plugin-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f907ad22b995a89067b2fbf245e4ae84280f4e6ead516ca728f2317db3b178d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-hyperion-soap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc172a6e98714542897ff86e8b096def8bd773c0f7a8b2d9a6dde31dba23d298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-xerxes-fomalhaut-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7390468aada72a572c90368c789b811bd3af07571ca8ebffdc59fca92f926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-xerxes-capella-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8243976b2a0fa8bec3fb00bd12d4ac5e6c780a4786f554e126b8c60c391f23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146641 Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144704 Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7617a5dee3c988740b307aac4e4479554aff7a5312cd6057e19a9803e588729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142897 Malicious code in gemini-enceladus-thuban-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8661679b1077c5c21fbcd3671502a87927310f0826b2a9a9638a8362b6fc53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...