Malicious code in child-process-registry-chai-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d5e0a4c75e7e750b51f9106f6d21cbf53719ee3b880b06dc02013b87e745c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-materialize-arcturus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a0abe30ecfd362bbf43ba3c31f8f5360240afaf776b1fd268c9fe69ee0e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-inquirer-delphinus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f99d7fb9432dd30ab8ca0c7996dc80b6510b5ece02616847e2483aaf06702d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-antares-chariklo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b721512cc47a4a37613f305324a66d29cc423e0fbfe0d78155a8aa93f41bd14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140167 Malicious code in buffer-pavo-europa-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511fadca6bcdd76abc46c84433dda6cdbb8f5941abba97253a8acf6946b7cb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148726 Malicious code in toml-websockets-dynamo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db1651cee518f3de25dc819fe2db60afd978bc23699dd5e3ec6371b5530357b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144698 Malicious code in markdown-pdf-oberon-rest-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6736e26ccfb46fa55ed3f0c9f17c3723e146a0902526a7486246a1f5ab8b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144621 Malicious code in magellan-alphard-cygnus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb03d334d5fb3fded9247c374d838c01faefeb9b836133ef2f495a0c002fda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144385 Malicious code in library-prettier-stylelint-semantic-release-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048a235ece038bdbb37f29922f586e5674b5501de5239c0a7b67a15de6fa8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142259 Malicious code in europa-child-process-link-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22975fc0b1cef30e326d92c69dd05052e47b7277630c2b57b0dcf5e1986f379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143467 Malicious code in hyperion-blaze-acamar-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90140d8ff340cc1c854a9713092c1c8b83c93d8a48f428989f69219cb8a47ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141823 Malicious code in dynamo-axios-vuetify-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07f3ccc278e62a86432c414a4fe672c642dea1baed087c337de30b545748280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140872 Malicious code in comet-cors-procyon-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a2a89b119108ed4e870e27de544670e728a8d329e9e73ee1f8bbd76d6dc821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147908 Malicious code in shelljs-ariel-ophiuchus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693053840c257ad600fff44f093b29ccfea20e6067e1597aaf6f8e47ebdb03ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143652 Malicious code in inquirer-nextjs-galaxy-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bcdd082ce996def33fdd212572b9582cbc25f6717782a182c5688ad39d01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142887 Malicious code in geckodriver-upgrade-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7eb7f5199d42872864bccb85bed6da5647e35478b981e790fc8cdea403f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141993 Malicious code in eleventy-csv-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef3bc58089df1fd8c787fa0c6b3f40c2656d4f1cf48409ae9581d82d97c9558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-nextjs-playwright-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-chariklo-webpack-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f539904b019a9a6927140559d0a40efa04b8065a579e3438207e57294f5c867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...