Malicious code in mongodb-materialize-lint-staged-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-init-cosmiconfig-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f04d7568c3f028f9202f6fd6833b9c5817f3896fd5ac1dce658b94d355841a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-unuk-atlas-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438588389d84f1c5fd8296f29196fa8a29b8a8cc8f93f783d59cdc971cee9b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145816 Malicious code in ophiuchus-got-perseus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db03ad94a523479b2eff4c7204a7b1a786f887f15f2a953ae986b77d962c4be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143286 Malicious code in hercules-husky-blaze-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed5a2f08116d37357f8074fb85d6e54dda19d5bef3ebb37179a4ab84fb0733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147596 Malicious code in sagitta-express-reveal-md-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec668e95fec75e52b44abe1d7cdc557d71c98e8c073a395a85f274895955b865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145105 Malicious code in module-grunt-async-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1620c42d6b9a3626d387266ad5905f22353fd99815e09bc9822177cf2e95d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147894 Malicious code in server-electron-blitz-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8904c00009f7e78edc3add02b97ce60da1c69ccba3ca365bda498e0e7618d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144651 Malicious code in magellan-mocha-xerxes-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b63294d000d30fd93c62bd4265da24ed90adff3b46b2ace50227e664925449b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141709 Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147092 Malicious code in readable-sqlite-lint-staged-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142181 Malicious code in eris-public-metalsmith-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cee348a9b3e9c807a98d182a4eb2314c88e555a006cddbd40e0be915a84a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147109 Malicious code in redis-magellan-hexo-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d306ee87ba5effd1c09c4499374cc41c683e9287de16007dbd8653665a3c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139609 Malicious code in astro-izar-nova-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b583ea4560f220551e95bd3c98bc2ed79453362f6bdc60b3ea7b69cba8f1cf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148662 Malicious code in thuban-rate-limiter-inquirer-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31db4ff3a14a6cfc7a3385757c75aa9019610cf3589b4e1d54ca754181bef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139853 Malicious code in babel-development-jabbah-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4633fb1131d4ee30b5d86906777a04819c33d351f67befb19c8d6a18c2caace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141896 Malicious code in electron-builder-async-hyperion-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b6089e45b3bf30edc036b6652f4c1590215d51ab6b5f80ad7b9e3adf40564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139354 Malicious code in altair-mensa-cypress-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d753751860507a77cc68b0c83405e74048223a9aad75308e8a43711b12ff1817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...