Malicious code in stop-google-magellan-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7160e38108659c54f1103cd1042f9139fba98b7b6fdbadbf9c5691b01e5cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146140 Malicious code in phenomic-webdriver-mocha-eclipse-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc1fa8b436f5e07f403d4b7217a2c4f24e502c13dab5fe7573420b4b4bd8528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146606 Malicious code in procyon-mongoose-meteor-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6f06f34d61e17c30e370b3cd08343aed4d0f6b607db2ca3213a5a7459d1512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145745 Malicious code in oberon-firebase-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b771677147a576d042064574bcfeab962f3a687f90f3b3887e89b1b32d193d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140384 Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783b2eb36e9a59e9842d099ec0ea4684a08d4090b6dc64176a70fc96e35fcd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-html-webpack-plugin-nightwatch-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faf112d9190685ca2c8327279dfd95f90d5ddf26f8a8c95d805f3662f4bfae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-deneb-eslint-plugin-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca28c4630f7069c8ff7f629c225a8554f422bf681c109a76cdbaabb1cc4edb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-transport-wezen-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca29ff1f63a5f48497794935781fc2d1df5ee67fd2936e9dc35f28b316f3cdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-charon-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132a3282516277f108b9368592cbb4dd3d3cce3637e6c9b4103a34bade58c83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148400 Malicious code in supervisor-publish-cosmos-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568388e674b156aa64cb527778eca4e516be31d4c94ee45e60433044ec8377f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-hermes-soap-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d020f29de3afe6cb948bf0aaf77863bd0e8e830591087dadf33cfbb7f2c86de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-upgrade-eslint-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34ad3d49dcad1f0421367563dc40724da0c20deab13ac06e1f0f83f6a092d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-spawn-iota-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e02a2735f04330ceaa2f373020d5d6d3640831bf53b240730c047be4df17a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139312 Malicious code in algol-upgrade-ini-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac480b2708c408bd3e270ab7728873ee2cac76bfff620699b9d1e38965fe6cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139681 Malicious code in auriga-less-cz-conventional-changelog-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903507c242393d0623b15f783488841c20cbebd61009083d00d941960d42d7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147037 Malicious code in rate-limiter-europa-pino-pretty-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee11da6aa21c1eee394751ea6ef9bfc6013fcc34a6a9479d9cb23c891837a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147742 Malicious code in scripts-pino-event-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128e90a0f35a135ee0249d752b33a18aaea7dba4c4b0e42facd5a5fc7438b978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-levels-terser-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0119e00e1c8dc62089028a6be74894353bf9c1eabc5460e57721cdaa4ce24bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-auriga-native-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8108a1e0499fd22a3c86ad23fc52c308e4e96fadcc54d24cc92a56d1dd37e205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...