Malicious code in lint-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe256531bfbaf8c707e1190eceea22bcdef245f3ba69e06e9cfaaa55ddf58338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-webdriverio-pulsar-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216b2edecfd28fe0ce40416480e2ede3426f58029ef3fc875e276e21ea492fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-winston-bulma-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e6a3b48b1fa6a57f7a149b87c21c622de6c043358cb99a7e0448970c1f9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-update-hyperion-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856bb93d73cea29e9602b81c30057a610e50532b6049d7a87ef6b010f8a1aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-grus-rigel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a756eb41b87e1ab320a650e477863fcc7edbdc9c4a284b3976c2468ae303845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146245 Malicious code in pino-pretty-webdriverio-sails-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb71cd18591ac42686f98b32821d8f499526454701364f53578840deea6ebbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-umbriel-axios-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a48b5da8558a447c6380d7ad1dd3f14468d26f6806f41b77ccf389e6b1ab712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145405 Malicious code in nestjs-terser-postcss-loader-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea7dc9bb5fec3e638d15d76e199ee6a1c671cd51e20914ae74fbfcf10853450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-version-rimraf-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8e258cbbd7b05fc7b948248f6d0922d4fcb8d1fd555abab444074a2c1a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149093 Malicious code in vega-library-schema-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dcc95f4dea0db952210a246c97eca63e5bda6d4afe8728102b9082fb2aeeef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140414 Malicious code in carina-mdx-xerxes-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd044204a95843e7083af4777aecd655a9d9ac6d2120c78c235ae0164b0c172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142173 Malicious code in eris-firebase-uglify-js-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22b8691eb931f80f9c446b1e16b1d7b9aec3edef7313e383b600ac3e3e040a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138617 Malicious code in coherent-plum-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical-tan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce259aa8c0f820704c5dbc6c6e654b32f6f71b2975d0027a982606e68105814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6f329ce348405372c671d9bebaaca9797c0cbdfa4161c56e8c6fb674b5966e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tempe53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3620465b359dde723ba08a4db40a653a86077a815995a5b4a25e8b97b471f77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-gorengan69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5f173870da0b4ac7d6dcdbe418701dc25577feb788de6125ad504428269d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5024b10717d814d4d2d9907e5933c7888c057df4649f478d62d470625cc645a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...