Malicious code in triton-bellatrix-dactyl-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4fcfc725bf72c153080133ef83094f7786e64163bef4ecbee61d8226ab4c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-prompts-spectron-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffbac0173e72b03dfdaa1457db6cf12a4c211a78ec79e788227d443bb8322c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139195 Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-apollo-oauth-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b3417cb0939af2d7ef1ffe7ef71b3fc5def7e905d096c43f0169cd5108118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139180 Malicious code in acamar-npm-fusion-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d95af17c88ec72811f0222e34d822483f1989fc44ddbded8ed3780ef28b976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-mocha-norma-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafad7150ac059d1088731e36c7e059264a25f901b0fe893009c275bfadc86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149521 Malicious code in winston-procyon-cosmos-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5551dbc40563853d6ae0acd4a986d5c867b6b5cbaa8947773d0cb09ede006019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142795 Malicious code in galaxy-virgo-reveal-md-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d034c71ef9a2bd303536b3a128521aaeb01ba40650ad9fff9fd2ebbb812a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147578 Malicious code in sadr-upgrade-airbnb-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82bd40d74505d643d24b7f73aa5b7ecceb707e680b6eaf31a2fecd6cda9766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142982 Malicious code in got-prettier-stylelint-server-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1e434b1aebd213e3a779b99e36366e7eebfbad07d55fc7687682a5c644709f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148572 Malicious code in test-exec-terser-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b44c74c5719b6b3b0b0065dc5a854564569798ee2d397b1a35c9236842fb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139681 Malicious code in auriga-less-cz-conventional-changelog-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903507c242393d0623b15f783488841c20cbebd61009083d00d941960d42d7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142961 Malicious code in google-inquirer-hapi-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7be58eb29f37467c3b6cb8c68a63f2c4c96a8058f7dfe17628c5e644ec52db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-transport-wezen-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca29ff1f63a5f48497794935781fc2d1df5ee67fd2936e9dc35f28b316f3cdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148828 Malicious code in triton-sirius-redis-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a389ba92aa537b6a692d69e49d7613e04b83d6c6c30d29878b2d179117f167ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149566 Malicious code in wolf-vortex-helmet-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b6fd913838bcf44c2bf7b0a7179956fb82c404889a6981a97c5a3154c6604a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145325 Malicious code in nconf-prettier-jekyll-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1193615f9567405da1dc0cc9bbb83540714d24ef80292fff0db89a9eeb5db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148673 Malicious code in titan-centauri-less-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957fc566741844af0c99ff38cbca3b500d39ae7fff7e88fafd0d84fa24ea5a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147476 Malicious code in rocket-phoebe-norma-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b96ee1261f193a70b7eb7bb78cefd12edeee6d534a331c98854f83aeddd3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...