Malicious code in virgo-farout-cygnus-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f515381d2ed9b5123eae6a36d19639f2221e8136e2dc3aaa2fd13e12ead6baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-umbriel-magellan-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454f934f08a86179099a311432b199c211ba455f7670882bbf00c0940347c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-exec-sagitta-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5652eb806bf9840e686042adc13f54c667dff2f510804fbdd19f2eaa4763379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-postgres-publish-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69ef1a05e965d83cfb4cb86ad322a2c76bdc4bcd679eaadd6fb496f43fe92bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-mira-cypress-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff288bd799235397c87385876fbab2931d12fc07d382d64b5053e7de4fba340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-hyperion-selenium-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a73c967d261d802ac6e60fdb8f74ffeab4bddc6099683bc614752998614c345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-nightwatch-pavo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5dbf7cc4320130279ec9c0342d1b90cf3d0f3fd5e78d3f5f959952f9f5ccf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-perseus-auth-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894d2711a72c13a2cedb18d34f26910a1cc35c9265593150bcf55b7da4d90e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-changelog-cosmiconfig-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d9ea7b954795a472da77c59e5779afe513ebabc579db3051c8ccb635e1150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142444 Malicious code in fetch-halley-await-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49bc547d565dff9a16ca114112f58261d335b57e56672f1fd9262c73fb5a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139450 Malicious code in antares-xenos-fornax-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36082075eac92799bc35bc96d11c348c8e7c0aab61e9f5a9c5d394fbc5d7821c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149588 Malicious code in xanadu-await-rehype-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb456e8d781aa45a1dacbf7f30970b88acc27ae993d3a50689322268cf4fcef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139329 Malicious code in alphard-karma-airbnb-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24053c312e087113d9cf6bb899794dc96510455bee527c75abef0bd3abfba6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147683 Malicious code in sass-loader-rate-limiter-aurora-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ad9fbff58328e4c83ba974785be6b6070e9643bf90ab193c6780758b34c36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145225 Malicious code in mutation-levels-antares-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6da819c1be7de811f097b3936686090bdd2d7f1d341d84ca575fa6572b3d753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139913 Malicious code in barnard-nebula-altair-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d371224236e78d1bf077551b6a3e5eada33e7a51cafbbfc732804d200f8d6f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148267 Malicious code in start-chromedriver-rehype-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06272d3b898195ececb72f425e69fabf48ad1d4613749198a43e9d6738efeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141284 Malicious code in csrf-gulp-standard-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ee9b278d75ff46b2a58a07825017782f52f5671707881176249b21328c2f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142579 Malicious code in fork-betelgeuse-levels-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019cdcf865b6fa482e4057127c3724efff63c2661b5fdf4a6b48ab4086346ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...