Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-perseus-jasmine-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f356bb4d61795fc241c8c90b7069725fc6c8e2bbba73af382ed4cc9fb3072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-carpo-yaml-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cc2702bf536ac942f0062c5a6c776da5fc9a135b93382df362258e62dbb975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149537 Malicious code in winston-zephyr-nuxtjs-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912f6a1d7d2e2169fb6ca024f4ffec9fecad6da1c2231d994c692d1a85486a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140388 Malicious code in capella-got-norma-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378a90563bb59c066009d1f716b8397f7a9794d238c740fa8209ae523f935e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141772 Malicious code in dotenv-safe-protractor-bellatrix-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8193c16d4b5afbfe238ebe608716ba96c5fff7255b801cd103a6d0ee39f61375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148355 Malicious code in subscription-europa-babel-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ac9f5ef5bcf96887f2c16de07fb146a1ea8f5943c3aa74efeb025cdadd5a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143621 Malicious code in init-gemini-cassini-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4652bdae27a6d1c8556e49240b029156bee9a2651e9b9630008d24f065f9d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146729 Malicious code in proxima-process-grus-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2ea0253eb4cbcf28c3e8526b146995a264704021ae0f5ee845fc8dfb8f84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141490 Malicious code in deimos-comet-ganymede-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef3a69785ee560c1abd0a6e38107477d33b1462d52e8de5ad903da881e50f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149787 Malicious code in yaml-eslint-eslint-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af85ec1905427d26a8cb76ef206a0a384fba45266e161ae68cd007fa65ede164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142480 Malicious code in figures-protractor-changelog-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6927adefae2b36f27f179178319310ec17e61ada0fa07dde6c9c2c00d2085a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-markdownlint-husky-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deac6805d708e640aa50b6d65b29fad2ecf88b4cf854aacaa08dc114863dfcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-commitizen-koa-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9be3e0b6abd33eb7a29bfccc6faa0d3513fe2ed7adcb7007ae82d65c971681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-altair-got-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a660fc5e738c8d00b5f3881d89852c995e28e12b38ece3a1ead965d679ec57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-uninstall-mensa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd5b870f472128e8da885cd3ecd401a1e405b9ad6dfd3cd561535ee6b6707e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-hyperion-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ae678ae08345a4d7d7ab5562656176892d798325e14613abaaa1ccfd761396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-xenon-non-blocking-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e573e2a8a72f5fdcdddcdb295e20389f2b205a62fa514b5699b3b3e88eb048c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-warp-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbb3a25f9e7115cd8827ab56a1321c0f8f884a081a2f18d75c542301245404a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-astro-corvus-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58e3d277cff82825e0b421686cf2246c1d36a3d87e8248f7367a29975591f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...