Malicious code in gemini-sagitta-cordelia-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8d2311414e1b1acf4dd1d565d5665bcd08dfdcacfc575f768244f7c9c7ca75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeometry-impulse-galaxy-dysonswarm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a771881cabddee40de70b816e41a9e98fab7a207bc97d1bf8ebfd9b215ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189154 Malicious code in relay-dotenv-chai-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135aac248520c4091ba591b4d2d36a84f16d5f524805d7e46429c91cd4936504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-enceladus-supernova-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0d9eacb602968519228c53fe632ffea01a20848339c1332b7c1701c9be4f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186403 Malicious code in cryptography-cross-env-google-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919e037d7178bbdc5cbd024f17c6cf5bb23091ba301945f2431560076af9bd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185744 Malicious code in balance-dog-throw-balance-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e2cf175dfcb256e4e04e8d82f344e971002226d736740c3e3050cf4aef44a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185455 Malicious code in andromeda-grus-leda-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ba83b5896b11f8a71f9cc0fbd13f3202cf4c74871a3ce8a9288b34209bd629a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-morgan-css-loader-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df18935c38976d8952bf589369f1a0e87fbdb16e09e484594e5e302fd8d55ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186586 Malicious code in dione-dorado-apollo-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcbc7931eef29ac5c5af7ba06802424115895cf2f3b63f7ae23d400ffbdde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8546f292f3b1587e20ade12f038cbeab5b773d3169b8f6e03f895d8f6dbcb3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-farout-html-webpack-plugin-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f90a93fb08acfd5f7fa33fa6b6f7fc638d17fe538b4201be97e4fd9c7c056b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186627 Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90fb944cc269795d653356deba7764bb80e34801218d14654f3434c39296c5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186348 Malicious code in cosmochemistry-lynx-ceres-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ab9a101e57e01b17e4c0f19e62265f783a7a29c6f149b9b13a5069caff247f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190217 Malicious code in warn-spy-grep-compress-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adbd14c509a4b5f131c01428c8968f456dca5cbe03c08c476765d17541eb71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-enif-oauth-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc4c2c8bf18364da4a637c9c2468fd55bb49f379d7c4e4155628de1d3945d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186378 Malicious code in cross-env-atlas-thuban-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123d82a3501a08158da19efd0782a7ccf3a05e357e6549c278b82303abf98bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188947 Malicious code in publish-ichnology-eslint-config-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1632875bdcfe6f85b8d1e6bf0269dfd2a2eb7755789677cf74531f47a7a1d82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190130 Malicious code in vega-commitlint-prosthetics-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd5c39fe3aa4ba188aca38f7019952a1e2654a7b513aa87f542447a21b0cd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186185 Malicious code in cluster-simple-encrypt-cloud-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb15dcdb1ce2a9e8a213a04162dce769a621eea2c8ab50cb889873afd9eab5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189158 Malicious code in relay-tardigrade-typeorm-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e65873a2865720e808f1d146398547f6af6787ab402144f49958f3ae3b6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...