Malicious code in venus-dependencies-ceres-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d28cbe230c506ba0aba3b74498c279a73968c6d05ca9c736074a467aa0bb9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-envconfig-meteor-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5293cbc3ab68ee5e40f6a3c2e9503a885bff68d163cf7e30570724b385c5336f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-adonis-callisto-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86b777e7b69686863ef14110bef4d129fd9013113a9688fb043f551c76f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141427 Malicious code in cz-conventional-changelog-private-superagent-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca679e5bef873726be141435454053c2303e09ba8a82603c7836e0ae50b98986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142312 Malicious code in event-fetch-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41d7ec23ccd2fad63599eec79ef61acb71decba3e9dc176f355979acc910918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148002 Malicious code in slidev-convict-heka-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139724 Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148229 Malicious code in sqlite-iota-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3344171a165d0c3e2a68c971568f883679677b8f5082569c0d17202313d2518d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140063 Malicious code in blitz-tailwindcss-json-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6717ec68ba9ab458bd15bd7723e2855842fe4ad35f81756da54693198f24091f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-sqlite-izar-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8953c630b9079488ae498842bf4cff37440b69ff8f6b186fe0366168f2c841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-sass-loader-commitizen-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4674a8c00b8aa7f7eb8e8bdbc905e54e284119d17da4639e07eab14a901585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-prompts-jwt-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5591b1f156b3719d8f31d98a00071866e36084c212033dcb994b4a06cbf05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144682 Malicious code in markdown-elara-buffer-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3619655a017bf4695cad82d92475a15b8cbe18526c299bc7e44b636e1a5c80dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143515 Malicious code in ignite-izar-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0894c7a3eb9e5f3c158e630bc71fbdb660de946d7d0a92955c82af30adb08ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146955 Malicious code in quasar-markdownlint-ceres-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8113bb10e900e121e246fa006760ee6755edcbf80e44b1dd7707d972c4312330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-venus-install-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2229483646722536d85ff104226a170ef6e531b8eeef988858eb5722a8adb0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-envconfig-juno-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3b146043bb3e56c6b2f0c6cbfd5dc3564919bd1004bdf4292a5db2e8fa8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145292 Malicious code in native-phoenix-antares-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956a174c13c0490bf7e9a7ef5873ebdf96a8566deabda32f029f8357f56acc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143155 Malicious code in halley-mensa-prompts-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855e3f107c149e03bb867dc4f32af1a5ac1d3d7995590bfd0e43e51d71189212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...