Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147037 Malicious code in rate-limiter-europa-pino-pretty-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee11da6aa21c1eee394751ea6ef9bfc6013fcc34a6a9479d9cb23c891837a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-iota-ini-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d84e7df4e12deb90e73422bbd310ea7db2e28cee2688e87284777d4daf57bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-rollup-websockets-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eab2cae9acca24156af3f848d3bce6defbd98a5ee9f44457b23ff0fbdc0e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144952 Malicious code in middleware-dotenv-pegasus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0f4941cf5b5883299433711cd0d4f41306c2ad7d878869705eb0d5db5d10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146874 Malicious code in pyxis-cypress-chromedriver-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da52702d2ab306157f80cbc575c6437ea3e16d982d6dfc3a6d87f24cf357e7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140373 Malicious code in canopus-scorpius-kastra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4440eb9a52bb23a9e5c49cc79350174d4ee6e6de0608e1b396273bd4996232f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147555 Malicious code in run-script-vuepress-bootes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f92fcb02abdf3ddd958606e6a604959cbd6e8afde1cec02a001c1694099bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140838 Malicious code in cluster-upgrade-graphql-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c639cd0d7b8b69e23e078c6ddede7e447c6521c2b535b4b9f8efa3d1b50e6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139312 Malicious code in algol-upgrade-ini-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac480b2708c408bd3e270ab7728873ee2cac76bfff620699b9d1e38965fe6cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-dagda-equinox-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b733d89a3db7076a64d9bff93d5266b3f7675edb92decffd204c63f8e5aeb96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143486 Malicious code in hyperion-markdown-process-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536192c36618e27ff8830d058e31380e4431d9840dd8c3106a5eb2f8bc58953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-airbnb-dagda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a53bcc020075238d1989eb6c590d78b229b53dc5d97c211b7ce2577909b8c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149175 Malicious code in virgo-xo-writable-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a988f0de965c3f72dc8524142cd72070b2d172dec3c81c688da6051723cacfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-apollo-markdown-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43877fef46565713ec332e3eaea0f240ce8a94564f81b080ce2c75687fdced15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-init-winston-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e17715ecb74d661f9d84520affc87ae678fb865ac45f238a2a0c2a5412c477f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-betelgeuse-chariklo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f12d26957e00101409aa7e0c2cfb856fd8a82c85b7b2a264cd249f286106c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139201 Malicious code in achernar-magellan-server-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f2acec02551e19c519fb08429a857027f87ac2d9ae888c056fe99dc5cc9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148190 Malicious code in spinner-dagda-xml-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0290c84ba80b9e759f0e940702c39f74b6b346365cbb80b29af041a06932ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...