Malicious code in chai-antares-gravity-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78991cb9ff54d1247228b1af1b38ec21552073b5ade063b1ff9372b67c59ee8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-parcel-tailwindcss-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384fa299b65b436f3028ca3a4dfe779a34f359b58801ff82e30ea030100e86e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-browserify-callback-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864ab0f3ea20a6a763e34b88d57a3110cef1948b43a3c1c9f9b6cbaebab520c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-selenium-antares-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a0dd72728d650872cc34f9ee02fc202938c2a6f0fd57fdc800cf7f6a398729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-mutation-hydra-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf23dea65fac62655d4797e17e72c4af1c8440834c87f6901137f94fba8bf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-docusaurus-soap-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b079ca8f526dbb726dd16f2f2e90714f1804e7750dfce6c0faa824c9bea016d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-dorado-puppeteer-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3238269c2f191b403634981c58aa5ffe63bdb37c7dc0633c090a4c8b8d264b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-enif-rimraf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078814d063e1653768ceab42e4895287f704be8738fa6ad5ada0a2f48c65cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-got-uninstall-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c241c79c54717669b1615f6ff39fc3f1d6345216857f5d19eb4f75e5baed112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148263 Malicious code in start-backend-delphinus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56927550faff76fc83b82b8ee8c61abf5f4278b560fb1acc33b5f11b924971c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147489 Malicious code in rollup-babel-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa1c97be0276477461e2b003057f4e307e1f5b0733ed1795be8b28e0ff52f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139965 Malicious code in betelgeuse-andromeda-supervisor-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe094e00627a2f06acaeae706de8a734ba3bd11e9d5d984ed80007cf1c261d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142883 Malicious code in geckodriver-spectron-webdriver-chariklo-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306a2d3ddf0c3515faf2f4c8ac4fc3255dc3608a7fdbea69cf7955e99a9017cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143589 Malicious code in ini-event-carpo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12eea2d4ba6b8fc138699eb3d77d15d7ce2efb1865fc23f50fd7f44fb052686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139590 Malicious code in ariel-io-callisto-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e34a4a273f70ddab96ef9dba67cc8c2ea71e655a6a12b591757054a7ccab894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141142 Malicious code in cors-vuetify-mensa-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67a4c307c8503a7fe4ecc0e69ea682388112af41d9e1aae223fc7ef001ce09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-transport-barnard-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f16b41c916fd05bc457611fe0cddd995304c32516ab4e4973479b1f96166143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-fork-rehype-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bd2af128bab75e78effa18885ce78d40f2fe2aac43ad15b786c5fcb3399f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-polaris-dotenv-safe-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57e19ab1937184b42b470fef639f3354a1f7f637d15d6acba77b90c665a4194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...