Malicious code in fork-run-script-json-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a487508b75acecea952348bb04e9172b5b203a5e9a7c982696c74b83d7457b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-jabbah-elektra-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b1393ad21c122c488010604c363c0c5385feb33514676d1aaa1a267fa1ed98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-postgres-dependencies-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71addd74e758be5d25bb8be52e25957c95a1b656fdc300b65271be507b432326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-cassini-fornax-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eacb529e89f99a38aaf795769edfa5837e6c8f13440fdec0f882482a56783ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-nightwatch-jest-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5ddba454414b66e34db5850c8df0c196c3aa804d39005db9e389cebab5da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-parcel-perseus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0ffe22d6274e2d68cbd8b7e0137a7cec73c28d054414aef976087863d26de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-hermes-phoebe-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a388587bd7e5fbaee3160b85a520b4d51f8167dee7b9713177988156d1ad40ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-promise-sails-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db88f5bd46027d67ad0ed24f388c807c604ead21fb1c352fc07dbda7be2f823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-bootes-regulus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea1d60a341ee060fd308c857d380e387103b67657fcb6ba02d846cc3f73d1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-meissa-firebase-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1882021d75d0b4028b69e92eda556a17a972e548f88f350656c1ebf0e431763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-pino-pretty-meissa-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219c9ebd95a6895f7ae3b5bd30c7638974e7c6d271ad994f045c9ae4e3770967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-jwt-cygnus-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55ce391fea8ffa909069d2105df952902ee3d59197e6391746408eaeb185e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-auth0-castor-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78dda6dd9d98eba1091976353e8dee3850210f8c8f25cfca2de9027e312deda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-kastra-arcturus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab672036f622cc17403edf366693566cfdad9c4ddc1cf8820ab62c4cd78e965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-pm2-vega-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5fa3cbe2bbe8827e4309704d2ee84775a8f506d407ede201a5431c71f8f1e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144172 Malicious code in kinetic-frontend-csrf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c2450043f3735e544391159d66ba4fcfafa0a14422c926bf869d2378dbbe74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142181 Malicious code in eris-public-metalsmith-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cee348a9b3e9c807a98d182a4eb2314c88e555a006cddbd40e0be915a84a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149276 Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...