Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-solis-hydra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e4c944e5588742767a5571cfc83804f233a9273e1e095b54ca7a84a00cae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-css-loader-kaus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812bd26c1f739d7d665d9699eb06d6a7c7ee07a767f8e58b4ebc21cdf59f5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-halley-taurus-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a942ec4a2265c2589403d73c31d92b7972afc5a0720c36e2cdbfbd3b746274ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-eleventy-nightwatch-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5e46a452ac9ffbe7beb92ebda72ddad43802f7244ac85e3f7a8ec33bc92392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-bunyan-selenium-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbf6cfd3f3b1fe6e04e80d1120452bdc3262f19277791c0d067efd9c340506c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-adonis-vuetify-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff73a1b6084a0a234b5afc948ee60df5e2b6dfabeb69b2b8cfbef60243f9ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-spawn-csv-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216aa139732e8f8ebbeb9efa1d382e08a1049395c2a03bbfb6ae1873421a9b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-equinox-rate-limiter-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 830d11bb383e202f127224d082db8697943104502bf0c48ca97a4f120141df74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-algol-playwright-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c43ed5687be2badca88dc4e652ef0faeefa17a6e276273db7bd9df6ccfee5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-shelljs-buffer-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d64623aaf04619e9dbffea237cff686fd3ea843cdbfd2893241c7cf8b3430d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-quito-halley-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e627f3f10e73632abb1040fef38bfe444561fc70410833337e38e8496d0e2baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-lint-carina-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6a0b0e0492e54be0c5ccf4982364a7f1b1ee30ce12130b78d9c94e8f45369f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-thuban-child-process-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69434b1c25dc4427b5759fbfb809886fd0b6b03c34ae3d2899345893727ae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-graphql-xo-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7fe9788fc5f85a480b8336fcd4cf110708d0c9494d6b9eb531def9a0c2053f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-puppeteer-spica-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49a3c927ec65fd58703092a6e2e828a1b898fb03af1f389b91fdb76efc5d67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142300 Malicious code in europa-webdriverio-chromedriver-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9261fa6b5e81737cb2fb47ace42efa2824f828b3c51aa7a92dc69a8f409c5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142824 Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141967 Malicious code in element-ui-exec-magellan-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6eadfe409b6ebf2307847bd2b1fe9e98c0463b29acbf0f434d72d8f0f285f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143030 Malicious code in gravity-release-it-grus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09062d217f2cab9bc84d5fd2de53209547f227b4b9adf43d81b1da9e14b92407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...