Malicious code in commitlint-config-angular-pegasus-xenos-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c2051b79f90232311e21a77400bf1024281ed15567f280e1ecad0578366fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-iota-link-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdb3ab0c97c2d7514836330e92608bb78a25f46953d22332cb32ce438a1e7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-xo-deimos-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61576b26cc1474af144dae38e94de3ac5b2ce86a3ce05623d73f220d871368d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-nextjs-playwright-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-selenium-postcss-loader-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5c5ec2e9a493e1c1dfaca85430575b03a67d2f1baa1266b0db4763fba9eb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-mysql-titan-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5be0483f9f2d484a74a5e6c0d466892e53451bd24a35e171e8e7326188258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-hyperion-envconfig-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75325a6cd17ff0185c982e5269ab753bfab2e7cc19234fbc8456515a4ecc2381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-prettier-stylelint-server-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1e434b1aebd213e3a779b99e36366e7eebfbad07d55fc7687682a5c644709f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-subscription-pino-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b084d77d240ddb72fc2468a96b8d733738ecf2c519fff700a0354752768c0774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-cz-conventional-changelog-meissa-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac21f13b4b7614fa1c9af0606fd1809d609ba57b1a9f0340f11c23f245f30b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-mensa-convict-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf98e15fb2d5e78f0ff9dfdd1110b97f6ba405e1581988e397bf413108df41f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-soap-vortex-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385e2601e243ff5a96bff2b732ca8a19c8db68b7250400cae9ff4e8e70bb5f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-chai-nuxtjs-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d5d5ea2f7c4831b445a53c4b04bc94d73aba09dc480a3bb8fbcc203881eec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-grus-webdriver-manager-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9fee113459572e0c4edfa54be3fd7616a17111bf73aaefcab86c4eaaea0ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-socketio-enif-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad3112923e340d924bbe9b609468fbed79b3805c41fd9f6c46d9810c00ae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-spectron-webdriver-neptune-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3dfd0864f7e0dcf314827f16451b16494d60b30f668d67b260559a36c58763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...