Malicious code in rimraf-npm-figures-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e67eca40b604a5fca714a24246f0b0b3cc6af4183d168739c32455e8d84f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-xenon-docusaurus-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18e6ac6c775039d3c19b111ee39a4af9bcc6553cab555cb4dc856a71bf73970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-passport-eslint-config-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aebaca9d83597eaa315d6064a074b23ccc4564c49240edf92a50d5482b736c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f976666400c8581d9105dfe0fb7da5ae6fb7131a6b527569a93b206d34a4c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-concurrently-fomalhaut-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f42ebaa574e7ee90b1b6d3611a83350c54b9886394a7d37a7ad315af7a0d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-titan-andromeda-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db56ca2e1f597d46076e860c53c02a5d847424aeba44464086eb792744037e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-quantum-public-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f32f9ca1bb4dec77e4c7dfd7d93584f92b71a291ca7d219c1c986fa6a3f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-uglify-js-ophiuchus-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3763d689299b26c905a36ddfa3ea5740c798a3ebbf3ae26b8f4a1e4150c295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146289 Malicious code in playwright-yonder-module-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a88d8d6c9de0dc9811395ffc27c01a2b4ffde660a8f412ebbeaa8db6930e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139865 Malicious code in babel-jovian-despina-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2823367bbc3c7c96040c5a58d99c6d21a66d43a7f43c856472b6e49615b3b84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143130 Malicious code in halley-auth-vega-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142277 Malicious code in europa-kaus-ini-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b8eddeae826b1fb99b6c944ce28b1eeec45196af20edf767f02e9c7e31ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140228 Malicious code in bulma-sadr-registry-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49139fe083040a54e336806ef9971053450cdd358b3f344e5848b86fcccf433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-enceladus-pegasus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922dd32d2c25215ae03fc12f657554932a92be0caf2e526bdf50adbb6271baf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-zenobia-colors-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a618651c28211d58560b99c0f80a6c373c196235f384a81f13f6c7994f5ba7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-scorpius-octans-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4011eaa486cbc130107b6c5b0293b7b15c8a0a58eb271ce30dfad67d434e3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-superagent-enif-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f582d1fcc8b43d9206c0d7ff651f4fd9297da9b6c8bfcd5c44adbf762e6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-mongoose-izar-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4905356f7d7660ea8d6db3a9a4cd083b576c9326b611a07f161c6363329e962e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...