Malicious code in native-oauth-fork-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc0a76c49b1d70b7ecaa8be3efcd35bff4e3da8c178acfd5c0d01ea58834e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-remark-sadr-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55198b1951195c04b8787ba7ffbd4ae734f7ff221bcd530b6abd49b8e709a72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-grunt-public-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe26f85418c84b4ebf3b7689d139f27ea4218df2384d25a80f0abe7254de31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-antd-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b73d5108ceb7964a0b3a0e61afd7965a64b68bf06041bb1b24837b5be84fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-callisto-leda-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d474ac48bb6136b5f28eebfe39fb40bccfc09cb06dec1492d3aa0382d4872c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-transform-prettier-stylelint-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d23032fe018322cbbf81c4a145ca9e87e09a57af0a91ea9d04b07a55c09e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-lynx-alphard-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9b55d95bff3b01b820e5275231787b88a0bedba36e9439919568bbf7936231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-wezen-nightmare-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f411fe3942ef410ebe4f961f8f7bff70042805c1bd5079c6d8b2122db7e44cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85498b1cfb1363adf7f3f0607af18be5b0295e58123b95537e8af5ec9afe85b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-firebase-dotenv-parse-variables-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8bc64e640d9cd2b3a41882b58e530631f6762fcd827528fd2025ba8142320c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-ophiuchus-kastra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1167ba24be7b9251d59e542b0593599d3d543aacc86c2bd0a6b7643b4babbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-pino-neptune-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdb944f658ed68cee18e920c32f8c3cb2c9810b5b8551c7e42d18eef82f85e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-nashira-install-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cd71edaa7716a45fc85c9b6f363644f060686a5f3861bae46460cab85fc19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-charon-cypress-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6847fd56e5f61e5388f977b14d33e5665d8d11a56e30d5bf5db8f882ad91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e146e7e103cbcdd39e76b3fd5cf858a075d921f796820be6880d0bfea79a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-element-ui-dagda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144848 Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143590 Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146043 Malicious code in pegasus-morgan-polaris-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ca8a23e8d2cec9a4cf37fc974af0d4e84bfc6df5c1adc870b4fda3cc145cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143769 Malicious code in jabbah-astro-update-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d05c71d4e664abc9f344c8ae0080f7d1f437b56a3bfa83439c01a3b1374b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...