Malicious code in repository-lyra-husky-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c1b313930346692cffce6f1bc61b009d5c7fc2c4c6e9261b64481607b9a669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-alphard-farout-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd20586f322a194db4c9b71f1e67da30870a5aa8e1a59c3861af98d3115e87c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-grunt-zephyr-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5618c03ace1b7982597f2237ad3ce62c1e20dfc2b23419fe11450d9d6f70b7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-castor-fornax-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6637764e61f86def541cb2e44401fe0c0a4957a2704a9f36ce9be071775ae1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-geckodriver-octans-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9229208f0bbf990d1891de79b9d2b99741eb73cfb03133c03e8d495f8f34529e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-webdriverio-scorpius-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8974cb5555bcd7e749d58f52450f3aa78f5e62beb1db5026d5d8d9bdbccd42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-fornax-duplex-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6c6c69309a6e97ba9068bd9dc84fc3a380e219ae32e32a0cd777771a2bc12a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-mensa-chai-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01362edbbd4889b7fcd0958ff4df6d0c1e3cac1f61f9e9a762c6f9b254f4c359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-release-it-pyxis-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61773a0ece38bef11fd9b5fb4ad27ba85fae3abf3dcd63868c9fabccbc105b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-gravity-cache-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb48ae50821c55007a4579308b3d0c1e0ab08fef7b5c78d81a107f08d1b8512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-xenon-arcturus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5240b3ede1f9201b1acc524faa01c01e3c11b02638005b3793905ffd25a4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-nconf-halley-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99eeea22776023a893b8e4b2d65a89134787e4071cffb487c1afea58bac1525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-tailwindcss-helmet-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8d7941f34ed14c6cb23f0f0ec0dec198e240f770b1788b17d88201f1fb16b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144497 Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139221 Malicious code in adonis-xenos-got-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262eb227d33e53762a9bdaf1b929da6e755daf1cc149ce09ba24785fb8e7934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143113 Malicious code in gulp-celeste-celeste-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc22f76f8f70729c7e054321492c0f31c542d27f0daf0305af86a95cc709877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146385 Malicious code in postcss-cz-conventional-changelog-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a47ad08ff76838aba861fc6bd56d941e16c5920f34a1d97c32b77c103ee738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147301 Malicious code in request-magellan-nashira-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb038937d8f4ebb3e7b9922687f8503ee4277c16c3b7389a6dd6a4e4770f21c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139908 Malicious code in barnard-hyperion-warp-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5612903c54308e3be1b0a0e6cdff1d50c3feec5ba320d1f473057988b0c4f028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145590 Malicious code in nodemon-optimize-css-assets-webpack-plugin-epimetheus-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180a72d45bdbb58b46fcc6d479cd540e67555ef1d4de1fed03fcef981d97533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...