Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-capella-celeste-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62504e796bd511f6ae8435cfb9929446aaf2fd1b492445401e5490987615812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-sedna-charon-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de453de1c49e374ebf44715c50ac02904e4677909382b3ce27270d01c5ca8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146688 Malicious code in protractor-loglevel-telesto-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82717f772c19f1967d06fefcd6ef777d6e576dc649381c42dc4cea9fe2dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-comet-carpo-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3105ee9bb6ac739ae73518d846f54ac4063dc0314d1af323b3ed40306377a498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-umbriel-bootes-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af263708a4f3826d4a9cec48859fffbdd13f5d22aa662e98d5196726b365e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-sync-stream-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272ae80d612727261195a18032ef87b80a908a41c49a641ecef28bc5ce12b63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-babel-cassini-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40143ba548c31793f042cdf340fc83a0f912cc7d59d8f0b4b7004398a8425066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-bellatrix-rate-limiter-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9372ea6c6e60fb1a3e5bac7534c0ed7ccca3a38a06f7426b418d0f6593484058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-miranda-init-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c9c5c07a64cfbdb4e49b18e0c1632ff3a2fd9672bea74a996b69f34cb302e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-webdriver-manager-atlas-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db68c78a636534602b31a1aab16daef84d3d2b32947a76810a94b4633a78a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-mongodb-command-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98ef2c255a17ebbc778012be0f17153c4e129d9658af352e7596673b793b339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-spectron-less-loader-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c1f15bfa8b9ceed404f696d7d67708cc87536091aebab7814c7dfc538e968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-selenium-prettier-plugin-markdown-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b026af46ec86f7d28b42b47be89d21c6c70732acb979773420fbb4796ad3a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-install-procyon-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4c20f3b514ef8beb31576a698a1ff40f0b35429dbaba3b2cb6943a420f581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-dactyl-flare-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0997e94e577b4a4ff7fc6f45c2326910b7e2834f4394205bbbd2358585a5f584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-elektra-writable-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 444eb6f58e2b31a80a7f2384e1894fea97a4fd4d95cfd71d677a69cdf909af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-commitizen-uninstall-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26219600ef7d96d48a10ca9e239a52acae6ed0fe396c10a6afb98d447e0b34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...