Malicious code in polaris-slides-izar-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5652752c5327649b710c0fddf98f02ea9ee6201f06dbb31d2799633b926d6fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139713 Malicious code in aurora-upgrade-venus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951efc2b516ca82cd5789c5c2dc66c57bc2c3eb4310668eb2b8e0a6946021ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8cbb809a5a462eecb562ebf259496a3417030ea7068dd248d7c76664b049056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-spinner-capella-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0e8d1ddde0788381e96ddabfe8341e2ff22da6843eb0046ffd53de5dbc0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-stream-yildun-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3b624a260274455e78a036a64307a519eda97234957779c2f5313e1a531af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143985 Malicious code in json-umbriel-orbit-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3b29923bdd6d0016afad2d219a67c133528e65c02956f723acc4acf4a7e49e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148248 Malicious code in standard-aquarius-css-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec05f0a48a6171709e472121b4da1b9b84e2fb0444facebb8acd27d908e38b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145491 Malicious code in nightwatch-triton-chromedriver-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963effceb0d337e9917a274606d2d06dfb6f477b03d1d27072955f2c53759913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-markdown-mutation-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbcdc7bcce2ff393fd1e2c0c05e1f17bbe1e11892186f9dec5884fda469b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148151 Malicious code in spica-apollo-iota-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419b488c19ab307d7bb586c2e61e93611f22530d984b9211a6dfbe9e169ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-uglify-js-stop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cb747f817d3854691f2f4e78d85638306150ffa98f5d294bc280cfc35f51d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148419 Malicious code in sync-commitlint-materialize-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d6947e064d99431656bf3cd47e63c4c90b399ee4ca1923bb8f4d5a0c514454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-phoenix-proxima-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b3a677d59c058e2af71eaab296fd60aaf80c2a9b6c75c08e4ed608913f6598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140987 Malicious code in commitlint-hercules-slidev-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991cb04c1194171b78d7f053ebf092f3b9f49e7ed29b12f2f0776aa9e7cc7dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-start-query-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc490646055a04b32e6ac80c29731adb0ffe77135199dacd712a2f500f6711d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-deimos-cressida-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e70ccd0b2b0e6bba0ae898039b44edfaf5267da39d9d94a84e53158d0f6ba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148642 Malicious code in thuban-backend-install-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bfa35a1d7ac1c7b373c12683d1d6bc0b2b5e312df771dc78ed67d22e8588e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147733 Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145875 Malicious code in ora-achernar-kinetic-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147758 Malicious code in sedna-castor-nightwatch-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b82800c207357c47644279b2c470bfe39a94a201027e0cd5e7aeb4ec123eb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...