Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-nestjs-firebase-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0dde942382f6ddca3adc5a8a1f9067c84a87ce3dedd4773c5f204d394ce2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-nebula-metalsmith-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa52ef2c5183342383256462ce7bd6e5e0e14beb32eb9bec251155258b0119e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-native-rehype-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-terser-local-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf83eeda2e0c97943fb7604db997f17502948b273c08090faa6b78153a60de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-alphard-tool-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-stream-playwright-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b3fd81d19302da9d8cc7b33e3af97084a394baaaa387caa7dcc86a22a5b040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-flare-kronos-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0a46c44f30d7254910351bb7325d047ea54e9a001b5120f903e60c06cecac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-await-commitlint-config-angular-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca5ab4510a606274ae8a004323b0e1abe851ab2bd6248263f9b5647d2de6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-pegasus-miranda-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a609dd6810e3c9556153e9e509d555cd3ff54164dbb8152df6a11c449aa87c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-charon-jwt-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7c17e325cdfd81b50bfbe7da11a4618b5b0413548e5d5ae0b0dff6f46a53f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-iota-hapi-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dbc27182aee5bfd31b5146e3edf1d1a806c781e33de5ed7183df2ea72cdd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-init-sedna-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e729a7f1b0789e7b94d947b7ba5acb27a8acd7ae8ba2fa26a5ab8cebd8b37ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139237 Malicious code in aether-playwright-wolf-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a9fc87fc510023d5891e89c4d64133639279668388245675c2377c1388e4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148434 Malicious code in sync-telesto-configstore-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54779bbcb4eec02fabbaa36234e8bc29bb9dcc9fb6945cc112b983d94e6650c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139548 Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147182 Malicious code in rehype-remark-sagitta-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9621a0c04e54a0924449a78b942bf69d5d4428434482ac10c175cad19d3b0b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147065 Malicious code in react-bootstrap-lynx-neptune-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510019b85afb9e4e1728b2f031dcc773b97174840ffcdc884eab7dc011eb029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148892 Malicious code in ultra-eslint-plugin-levels-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4c0e6023a4a0a627300221eeb5bbb3e70c0f49572a3e51aaf6d797bd0352d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144639 Malicious code in magellan-gravity-rehype-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07de925dee10238a4852a1837422b54d8a5857069876a5f9a55053132923bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...