Malicious code in chalk-dactyl-orbit-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898e80c587971502b590b876c55fb4a6a5b90d432319bf99f60743961464fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-nebula-fornax-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c11c5e234551c51c428218f768448a985e46be8ea1ada6b02335b438eb02b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-acamar-envconfig-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361b8a7389a834642eeb401ef7fbc6dea2d900d52e6c622faefef63f839a6cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-buffer-cypress-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77087077b5391b1a282a989a66379aa53a36663fdd0657e6717ea975080e744a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-karma-markdown-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2aa2e20a555341ba29c9fd65ce99ccd09df033527d93d3ac4e13a578a97bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-foundation-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3b80862080168727e51f66b36697ffc73536a3113103e04eae783caf4cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-nightwatch-library-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccaae8db8792428dc7440f4cee2f05316ffa925f7b96e7cad444831d4ce99e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f5507ab2a765098b7094518c0513e392911542fbd29ea2b6ac804164375eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147342 Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146823 Malicious code in publish-writable-remark-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec46f6e0858346720b7801097d9bd08d98ef8206557f600b699449748cfdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146072 Malicious code in perseus-cassini-pm2-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eecf795ed972026476c3d217f8d763e7e2c89ff111b2dcd751985e8ac5aef90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139359 Malicious code in altair-procyon-impulse-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5f3663de96a20cf01a988ffb3549bcad8ba1ba022d315dcd7dd91abb96a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142083 Malicious code in envconfig-package-socketio-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27f915e092e9aa33d429080d892b1bb8876a6c35d98508cb80f9051d0eb83f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148381 Malicious code in superagent-eleventy-mongoose-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10753c0a882ae2b325348efd7816467b316be6e149fbcef89fbd7ef2ee98699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145470 Malicious code in nightwatch-iota-oberon-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76da6faa946d065f4b6555f1dbd8f2d12ade217700a85abd775c10b71357c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143902 Malicious code in jekyll-dione-algol-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ef01a55cc9f252b9910c70276e19577b4b009d210eacfe3e5510edb24f8c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140247 Malicious code in bunyan-mongoose-protractor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03fc5c0bd9e4ea7622a6c29059265a630fae7403a1e904ce875bc56985f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...