Malicious code in supernova-astrophysics-jekyll-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46b2195c3e0992cb15bb7cbbf584a0b5e48b2b1dde2a44f4956181f8ca2dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187049 Malicious code in framework-umbriel-mongoose-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b42f5a2bf812a423565a8afa97eec03ecb98096dfa30fdb3f61353f872d6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188271 Malicious code in nextjs-tachyon-apollo-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808e78b34136ebba63563f7cd291a9023ea14a6a89294689d6a76ff25855793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190107 Malicious code in ursa-hawkingradiation-pulsar-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44783e0629c201822fb799a347c530d77eda8b2138bb131f0087271ddeb17fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188358 Malicious code in nova-sagitta-pegasus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba21826bf8441b5f8669b89056183151cc9cc9795e5a3f9d08c1ba1adc2ff4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190050 Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190262 Malicious code in webdriver-manager-neptune-vulcan-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2c9d5100cbbf9025a117af054f96d788aaf9bad8a5366d887bffe7b37c69c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190045 Malicious code in umbriel-gulp-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191c64e27e6c7846f4fb786da99ba6ab75ab274a4df6b2b6334a001d7cd9cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186281 Malicious code in config-xml-sirius-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58415b6cbe6528432cf6e1e8cd55074b566f71bef9a5cda12bcd5ebc971b522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190368 Malicious code in xenon-apex-ultra-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d255eba690342099284d8bf8a8103b1b72404c253a39810bbe3abd1882f8030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187475 Malicious code in init-enceladus-quark-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29ae2356859bcc4b9a2c4aaa80833cc872c02d453215111497fe3fce96496f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-got-heka-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778e69e1b6a1c981f67cb6ad0fce677345c087976404dfb27b70709dfe9619e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-mensa-hadron-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcad2a61b3271f09a9c91abfbe32624703525efb013fae44597034ae04873bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-bash-bundle-delta-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5937b4ff7dc4e858440a4d4659b214c5e00b7067034ed3aa76192d44a402eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189896 Malicious code in testcafe-jsonp-lyra-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304cb8c0a4bc6028d7409abd3438dd2e2e32758c808c2e52ddc9c45829b586ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grep-zero-sigma-log-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020bdc661008d1ca86daa3eb62afcbdecc07a425fb2f82320f1bdba3b5c51f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188437 Malicious code in ophiuchus-callisto-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d65af75f6acff48d55a94e31741a5da41d9e26f8b607169d254ab4d96271cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187714 Malicious code in kuiperbelt-yakutsk-bioinformatics-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885670282282ed71c84587d4d2937ef17189c810ce88b7d5f8c18a44a0e539ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadron-postgres-phylogenetics-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7efecbc67236e9f7c84f6a8aae55425b28b28775927173eba1a0a284193afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...