Malicious code in repository-dynamo-yonder-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74467515ba66c4c45c2cc1b0f974b8a509c3325685af2845e37ca5c06633032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-element-ui-browserify-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d0b6f9f5e1770e291ec877c626b62aa881b0280499d16c476996f731183073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-xo-resolvers-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f4181308607b8246271fc3e63b1133f84c5650de8e6a0b8684c67e9cd5ea06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-sync-galaxy-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90a43896fa1cfadba4360b32dc714d88a12f7cf85a3c9a4fa46833e4d72a7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-ariel-init-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac2f1987be8277ccaf644d8fe9257ad83ed8fffef022e1637db2b250ec6394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-eclipse-library-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba95ca976be0c959429a9d1c12a3807c824cad259d8fec7ec0d2aa123e97b477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-native-quito-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60bb1878c8530d69271cfa996a528baa124dbd611971c65213032ae04e9f6c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-virgo-eslint-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9404d1108d6ebae69e8398bde30e94e093d70c651f9acbb8f4610383a52ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-webdriver-mocha-promise-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a34b78be3854f8a312d3b05963d6757864622f5a0ee2876cc65de19051a402e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142524 Malicious code in flare-framework-ursa-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762d633d317ce47ae0ade8176855d229355633b914f402b4e29b5b9a2b19a02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-husky-slides-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-cli-process-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456e0252c4e2a30003d54a2df3e186700c4398ac5252d762bff1e11127186e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-zenobia-transform-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc9d78b1d33903534b438b07e80362725df7927b6669515c8fbac5965d6d3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146790 Malicious code in publish-jekyll-miranda-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6feeb4b563ffc117fcba1336c759485b16a38dba134d42144cfb8a11dfde6d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149180 Malicious code in vortex-apollo-meteor-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73b39a4ae11e65de11974c8e1b34310c6ed643b2c0ffe16c0cb86f1da8bc1b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149067 Malicious code in ursa-phoebe-kaus-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69783bfba45e98d6a435b4c9cb6d5b9550e9c0d504d05dfb30783ac4cd3f6787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-sails-izar-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe12116a5a42b21c1503042a0ee999073c715b3155d77fbd19d739f3d29e19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-docusaurus-react-bootstrap-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3aa9ac1422845c7110ab66791986ea43e2a7c9c6291c4a34b6c8715f22663a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...