Malicious code in figures-delphinus-ganymede-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7df939af27356d97f9a5ec3f6ee7e607f3e002848db3d2eef83a06a41ac34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-jest-miranda-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e3f11822f69cc3af5103540deaa2a91bf3bdeb149f75822db55827184c9fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-css-loader-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a93c6bec6b6bc86ae43ec926c92e2d9fa530b1816ac58f2a4e6aa10ef83170c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-commitlint-config-angular-foundation-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e12afc2824b46e6a521eab36252f75aac971211fc61578c98a536968a72429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-pyxis-child-process-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8266f3e3b1d69445352e920f258de0ae4c53efdcb390390a11291ce23337a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140390 Malicious code in capella-kaus-global-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699839cc245a757edbe4e1980aff3716ed5cbb4f51e2786662d90515c8014ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149721 Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7c82516605ade34ff31a1afd6d028c24b9db892f1c0ea2e581b868bd8edc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146524 Malicious code in prettier-stylelint-winston-xenos-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b65e57c7104e9d7b684f7a4c5f402c844575c8a57bd91d2dd386d718e0ff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147350 Malicious code in rest-husky-aurora-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80331c1c8333af04e7c1870dc3eca41af5845de120b7bea8a8a466b66e0fad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142385 Malicious code in express-mira-miranda-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae3b2a2d7def80718c44f599b95940a36f80043b02149736f2a0a1fad477fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142666 Malicious code in foundation-antares-yaml-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c13361cd8d538077dc2c193291919f1787c6e62fcb69632c5431036d2d5186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-testcafe-puppeteer-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71853a9de584909c5883ccd78ffc9b8a351786373211c69c929ccb1f4765a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141466 Malicious code in dagda-deimos-janus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1290fc2f8be734219db0a077bc5fc0b931f6e5f7c37bcae6290b03bd29ffe73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148435 Malicious code in sync-transport-resolvers-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ae256d0bc9ee4ca201d3790838fa96e379e70cc3ede5fe9e7ed844a7513d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147131 Malicious code in registry-kronos-bootstrap-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a81b3ac18b5fbd08cbd211039271d5e92daac86cb75d3103fe9f2116ce1527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139282 Malicious code in aldebaran-inquirer-sirius-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f156ebcb080250b5894ba54bc2119f15aea901db4121b5dda0df4c31a2490c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149485 Malicious code in winston-changelog-dotenv-parse-variables-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07107ba7dcac3d1e832e3cf8b57b85c3fa17c4ebf3a3f8690276f30a26886d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143596 Malicious code in ini-passport-quito-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ffeb311d8f1e110ffa3b60f8f0c6ac8e6d86e6a7314e921dface5e09c5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149544 Malicious code in wolf-comet-fetch-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cb2cd055ee7e7789085864d11a9b77d1aab75944129455913dabd8cf582247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149366 Malicious code in webdriverio-dotenv-safe-andromeda-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30882c5333071e479bc604754a3f9a75c212b00c96cc28b0fce68ccf9133706d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...