Malicious code in indus-passport-oauth-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0379683791185467ad7509ea141414868c93f65970bda8b65d73eee3b931f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-xerxes-phoenix-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa53cdb21883c83010f5b066e9c80d22153325969ee802d62fc3eaa81e6b529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-sedna-lacerta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1e497c4a4276f35faa02b0056417115ff74a8c7698fcf9124ddd14717dd13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-start-cressida-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ca4703dc3febe62df4f9224f16a6175999979d6c1e4ff155e28b2a5b32e3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-deimos-vulcan-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87885cf83feab2e1c3534b6740d4189ecd601dc4c2079ff35d4a4da7bf0a1b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149006 Malicious code in upgrade-centauri-query-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b3af104c42cd1e6c28d871a3de3cda443af276c5ae82679a43424867c39f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145024 Malicious code in miranda-capella-electron-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a770aaa8b309314468c5271d2a10869434f06988c03f942917f434b7c866c081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139371 Malicious code in altair-umbriel-child-process-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c96004ef35148074e4c1f1adf0efbb7176c7ef4fb1b958d124c0ae97eb3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140948 Malicious code in commitizen-ursa-figures-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d2b2b10f8fe2f0581eb6d7fbf66437e6265cf09e3d3bd6f0e3e5ac26422761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141732 Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9c03c53a96b3a1aa932f003782deaf85651c39cb3869bece3e210ab9492631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147112 Malicious code in redis-promise-sails-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db88f5bd46027d67ad0ed24f388c807c604ead21fb1c352fc07dbda7be2f823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144914 Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-delphinus-ganymede-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7df939af27356d97f9a5ec3f6ee7e607f3e002848db3d2eef83a06a41ac34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-pyxis-child-process-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8266f3e3b1d69445352e920f258de0ae4c53efdcb390390a11291ce23337a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-css-loader-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a93c6bec6b6bc86ae43ec926c92e2d9fa530b1816ac58f2a4e6aa10ef83170c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139282 Malicious code in aldebaran-inquirer-sirius-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f156ebcb080250b5894ba54bc2119f15aea901db4121b5dda0df4c31a2490c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143997 Malicious code in jsonp-html-webpack-plugin-epimetheus-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6b48ce6c4a45cb2fcc599034b019f71452bdb46a97116784b1fd1d4b5b2e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...