Malicious code in async-nightwatch-auriga-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ea1f1546d21c3f5b13122ea4150fdcc0800fceb20f7bc5ea7689a4a9b2cbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-neptune-eslint-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c4f096543a30ee5960737681cf9b3aa1939dc04aebef1c0ef66fe0b9706477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-markdown-pdf-sirius-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc930c5822a7bbf58c6f7f984bf76daf2b51adf0233ea6467e01ce03a493ea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-dependencies-restart-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84afbb88c014567ce635de5bd2f5f6ef18ad0d1ea7dc744aeab38c3484ada01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-hermes-jovian-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f575ed011ba9abd16d381f3446768c3a2dd8a2a7158234bc708e00b833f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-aether-rocket-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d35c84ccd5965f07d33d6f6f051c93ea065866d5b4ceea168037f7d7a05ff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-rate-limiter-hermes-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ed5470b13fef8da440abc68f510f271994401493afb95ea428c871fd94bd3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-acamar-publish-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b96ad5ee90376a01e0b366643303c92ebbfce04bf0dd3baaf1e33fb450d196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-fomalhaut-got-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088d7d122940c41b02e3cdeb1474049e7ce9455ae8c61523e12a292449e04400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146588 Malicious code in procyon-electron-private-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1abd1fbf5cd8388dffa1c895ff29edb594569791ac53d32d1bd721ba68fab52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140072 Malicious code in bootes-browserify-browserify-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5019fb52ca32d108a8a468f4c801ce7877677ed203ac920a136aadcd3625da08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149715 Malicious code in xerxes-public-eslint-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d15fdd3e3f0c5477368f312b0532431a264e618e809ebbdf7474e454016b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146976 Malicious code in query-release-it-pulsar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9d68133cc11dd8c7ad4eb57b193d34b5c67018ac38ae8f791739da62bed77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141476 Malicious code in dagda-magellan-cosmiconfig-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42085eb6a4d290ae43995ee4eda6a85b47dcbb6ca580e2965afe4b477e91b4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147163 Malicious code in rehype-auth0-superagent-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0608a928572c4b7bfb6946da1d1256c1306c074a7c2dfc451c142f079b1e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146551 Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141001 Malicious code in concurrently-apex-promise-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d0ae3ce5ebb4e1ee8fa5cfdc8150711786b2c1ab557ca0984b632bcb038f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...