Malicious code in command-geckodriver-nodemon-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc7d7639c732ffaf534f2f26040abce9230b7e28092103eacca20b187e958de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-webpack-octans-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea13fed971b35e318779039c5923c8814a765c4da9f17dae660f687a3960514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-blaze-rollup-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf36b483a8129794a54f0c8d1844c78f630daaa63863bc2ba90f9dca71b7166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-quark-meteor-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59bdf86a84f5036729f986f0bb084f669d9198a4e0f0560315f8725e29489476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-apollo-framework-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea42becba6a089bebabca0dc3b4529b470bb588c4ad13b4ebd10402cbc0a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-docusaurus-mdx-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec391661dae987beab474a5c6896851afb310bcc2fb8753cf7ff547dbdc624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-ganymede-firebase-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb71ee957d87735cb80b3b5cb9e0599b90d70af44d94f738a88ef243bedd5e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-polaris-upgrade-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7937233c7ae7519dcca1407d39174c3082cb36a627f6276572d315cb4abf19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-got-mocha-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afa733062f7441efab83dce9ac40ecef18f9055a003dc18b310395041acc520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140014 Malicious code in betelgeuse-wolf-octans-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4e62b6c89c77d85c75efe05cc02347324f258c5c99bbebecdd1416bb26a65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144531 Malicious code in loop-quark-rimraf-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51cd66b65d2db1213f39eea53dd4603c5e7caac88c57ee60eaa8cc09dc337c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149688 Malicious code in xenos-repository-non-blocking-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57351d857a5ef45fe7a7fc3b1ed7e68979fcadd41772760fad62f6d92ea5cfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146341 Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141387 Malicious code in cygnus-umbriel-inquirer-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0bf2ab43841e4c62581daea5b6a0f8e07b10b3a8a9717077ae93295ea710f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142396 Malicious code in express-xanadu-husky-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0e06559e846c241f796193a8640d2e67285bdd466e9b70508261a19b3cd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145926 Malicious code in package-canopus-cluster-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4926128f2e014bb66395c799c67566e984d3d4bc91e3d641df6ac88d39156e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141946 Malicious code in elektra-fornax-csrf-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29fe4511695ba881d70cb9d7a2fbe076c235ce8bcd732b3c2f2cbc7054cafc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146091 Malicious code in perseus-kinetic-mongodb-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbffb1173d5dcc002853b4ba9935cc827963528dfd53c8d8d7e443f7d17d8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142322 Malicious code in event-repository-cordelia-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ca10128ca1c595bbe11962c6144feccdb2b3ab4f06fec3de750790066d5095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...