Malicious code in aether-transform-capella-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70f2d60a13993377e528418f0db8de40d7aa55bf545f564a55617bf98ae6366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-sirius-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaf14e6e10cbe5a3b607dee0e7b57551519225a5dc3ef21ead34231d78cbdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-chalk-jabbah-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1dd6eadcdd25956317466d57b244fea1c46e8e3e005f9e1041479dc608fa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-parcel-mysql-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4600f02aa1b42d0cbe2f15feeb35fe523685db00d9a4672ab4254b84fd88a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-yildun-karma-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002463a9ef23a3781a6864d5ad3a340c5c545b7720c5f79a22a9477e198d67d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-europa-europa-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9201a8ae28b36901f0f929d62fbfe5f88ec9a91633f4c6726c8a2c58510b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-docusaurus-markdown-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71956465a4a6b68fe33a350a15f7ba73656070132aa30b36b370922f7dd325ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-halley-chakra-ui-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99400811af7181c5ba9c0108a2a94f290339d0330cb50f07159e1130f833f844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-magellan-commitlint-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1414f3f7790df277a34016899723c17f455ffcd12131449225c8c1dcbb98493f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-shelljs-enif-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d6bce3ea521ea3b8fa5d1f0d8d3c503d7a97fd2f7dc25e2a87d579491600c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-dotenv-safe-chai-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a02bf129c422cf91f95f6f735927b5be16e5aa0a264e7b197ce7558b296472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147844 Malicious code in semantic-ui-dione-graphql-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53702f4357ae4812cdd90f852efcc1e208cdb37c1d724570bfc11046a3a0dfbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140344 Malicious code in callisto-pipe-sedna-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567315862c15130d7ee16b1644ff030a5389ff4cf537b86ea537279fed0aa46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145665 Malicious code in nova-protractor-nightmare-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b9e415757c6071f6593050f97c59f34e49f7c658690288d860be19b3ca16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146559 Malicious code in process-mysql-graphql-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce30421baf221f5039852b56fa71beb90736340eb15021cdb3e1155efa5bad6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140824 Malicious code in cluster-dynamo-morgan-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d84da019afb622dfa09353a9c9711f4741db22e7ebeb3f066c21ec53ba3faec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141886 Malicious code in elara-perseus-xo-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b06bc6e93d26daf13d4509743aa81aedf7d2cc77c9a7522f0242c46ebd25bbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148507 Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147172 Malicious code in rehype-hermes-spica-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e1ab807813a01c2201c44d4da4a0a9147d82decf9479bff0a1ec89c7c4f72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...