Malicious code in proxima-ignite-izar-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084fb8685a8c7d2bc6c472e6376a6459718ad776ec6f90a7099e6a703957c3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-nightwatch-pavo-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5dbf7cc4320130279ec9c0342d1b90cf3d0f3fd5e78d3f5f959952f9f5ccf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-lacerta-config-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889402c35bba670d63a6ad381b3eddb7635381d2d40ca3e04ff69bdc22e701a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-tailwindcss-hyperion-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21873df11411c0e983ae620ee75aa54dc13b86929ca05c9b2f03b64c18324d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-hexo-xml-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c816af0f803870e47672c841645b4a3a9fe5a554904a699390f8a94b5555ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-fork-cassini-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5034f07878345120b3e58d57a392ead084af6eb7f29ec57084ae84861f00c8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147579 Malicious code in sagitta-altair-winston-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa4de2abbfbcd9f2e5d73c4a11a68ea0ac4f4b264734968882402c3a4b19f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139784 Malicious code in avior-sedna-adonis-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f6a18b05bbbfb0b1dc6c244b97d5ce8fb073ecd38758720a74adb3d57de635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147189 Malicious code in rehype-testcafe-iota-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d5a0ef86d9d1e26796efa729b64cfdfbf09a3a2a2669f32d1e01e0b38ee963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149865 Malicious code in zenobia-cluster-package-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403eacbc4e8c829cda478a410fd600fef4b12a8d2286f53a393b36e45c6f891a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144366 Malicious code in levels-testcafe-janus-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97af31e68543696cde777fbc0eb7742a0249f4e154cf3aee95513c66fb233463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140641 Malicious code in chalk-gulp-helmet-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e819892ef4c38110723e1c2772e4b9b3e9b6d1168ce269f008df5ec18f81a7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141550 Malicious code in deneb-morgan-mongodb-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784163d0e2a8265aa80028b5501e309ce377ceee5e7e44bb1fdc98e8985cfeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140472 Malicious code in cassini-nebula-sequelize-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8b6defadeadfadb68bfd95b13446d554fd4ec1136399b5cd0f0dead9135c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147425 Malicious code in reveal-md-query-gemini-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca14348c26ccfabf91c669c1372240b7bca296b2bdd6003bdcdffc57a236249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148277 Malicious code in start-norma-izar-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6202e4dd1c6acb703f9349e84d06f1a5c9572de5e85b4679f9f4475475283e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147595 Malicious code in sagitta-europa-xerxes-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b016074ca2bf81d31113e17620b1a0ae9d8d9e1abef97cc8f872badf16e6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146783 Malicious code in publish-ganymede-cosmiconfig-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8346c1476dda7d46c13bc79d119a9eb3a5dcecbdfabfa1d013f4c6ca36e55b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140076 Malicious code in bootes-despina-capella-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145315 Malicious code in nconf-eslint-plugin-postgres-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27040d3214079953d8c3c96719261f6c8568a04a0970d14d7e3b6677afbb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...