Malicious code in cosmiconfig-jovian-husky-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24159d35cd206dc42cb00bd266437465efeecc6083e43f4257bb6abf407b3b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-child-process-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b28413cef90aca4f8fabcb9fcb9cc4c3737e32a1247520c569f1d849bef559a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359550cf21a9089d3967a3f38250315ffaede55aaf39f38d500f308b7058829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-proxima-xenos-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd98d2a90da565834b252f27ed28923a8f160728c2a20f669acc1d5c4eff4edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-apex-nightwatch-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c57b286ddc57ae54033c79eb592e88344baf226bee98b7710e1289f2c944189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-quasar-karma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bd1d7f7c51f15d3c5b88398a4e2058f55838b7246fa1831d0b7db9807ea141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-spica-leda-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8cecac1c1179d9823b5417fb59873c0562de62cc50e700c3015893a3f59ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-aquarius-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a3ba18460fa574edc9d017beb864f9c2393908814fc53a05638effd130fb01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-despina-cypress-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876f992482e8cba478ba41f7af3818b4d168fe9f3409b584c8e0272b2d9689e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149297 Malicious code in wasat-procyon-semantic-ui-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c618454ff76cff11e80437fb251c750fcb3143a8744cbf519a2690c43e433fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148043 Malicious code in socketio-acamar-pino-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f52eb5feb86456ab516fbdf3dda48667262ff5ea6e7f05e4fa7fb2ecace47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141867 Malicious code in elara-celeste-unuk-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224c7375ba8187319a69a0db35e2cb1ee4fcd46fa4536d4633fa4f99f79a0254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148599 Malicious code in testcafe-ophiuchus-xo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21214842cd4cf23c4aed99f5eb4277c186325847a0fc2aab7e2c03f867aecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141042 Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142865 Malicious code in geckodriver-hexo-node-config-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9530b02e469e54b49153909a3ee6445e77fd868b15f80e7d9f35f3492765f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139911 Malicious code in barnard-luna-pulsar-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a6771f76faef39f94576dc35d54f956339cdad234d7db3fc5e7ce40604123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148151 Malicious code in spica-apollo-iota-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419b488c19ab307d7bb586c2e61e93611f22530d984b9211a6dfbe9e169ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142876 Malicious code in geckodriver-mysql-forever-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf46b206b074d2689df4a4a26220a882b67118ea0bf588a092a3e1f79777dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142362 Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...