Malicious code in non-blocking-norma-canopus-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7ca16ed66cf2ed36a524370a1684dfe876fd9423dfcfaa9cba377e1579bc38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-foundation-ophiuchus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734cc0e1a4fdbcbaa4277defdafd1411ff42c898978cefc6ce410b296ec7f58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-aurora-uninstall-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e26acb818d7d6462dc6b7af9a975034aae6a01486b28b5de249c943e90eee21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-octans-acamar-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5a0eb27ce8f5a2dfcaca555b902c33e0adef4bc2fe29a0608fab6b0b3a2244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-docusaurus-markdown-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71956465a4a6b68fe33a350a15f7ba73656070132aa30b36b370922f7dd325ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-child-process-flare-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65c77657c11836813d96b9f15522a940c3e8048fe28f0a62bc4f01fc7793e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-repository-canopus-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba3724528cf2ea5e3517db9608900ece2349c4500e1e11e2a5007886e3bac018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-standard-element-ui-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ce0f3bac1b17d65b475013075f790254b11c5a89bf35d1a2c597f700d9e42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-node-config-slides-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a989ab715d6a53eca8487e72199f2bab239e42894a2a0eeddcaa31fdaf4876c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-xerxes-zenobia-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be76406359009b1618def7488ec5ffaeed01ec585e4adda18e5470a73c35f24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-phoenix-figures-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5717fd99f1f963cf81b308f81fea9fab2eb8c0711c1f3144bcb3024c009fd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-cz-conventional-changelog-shelljs-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff22f6e1d86aed35355f82b088b7ac1a4a4215ad40bb82f0c8cbe3faae43710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-airbnb-ophiuchus-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1fbead48529be1f17d300bf0b47b2d8b48e21e46fd428594c0c40900d108cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143412 Malicious code in husky-child-process-lint-staged-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d03a106828f6507da5ded4d486c87ee74293ac205b21b7d112739c94a367fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140884 Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142184 Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144702 Malicious code in markdown-pdf-passport-webdriverio-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d30cf25fea46387169a2ddaa6718fe8741c9040928feaa0d19f700989e189e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148667 Malicious code in thuban-semantic-ui-elektra-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1da63aec152820d045eb1a524542bd027d82aa0a13ad938501d35379627961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-mdx-pulsar-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7febd9331b89bf99942d2c9455a80d4e037a082471dd9d9df611c1f8d1306179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...