Malicious code in spinner-hydra-mocha-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef413f567ba077fea84d7d2996097ce31721cd68e7bf89ed81889d68c55bf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-quark-inquirer-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e18b37ef21aabc03634e4ae2402cf0b55df19468c904ed07fe6aafffece329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-levels-supervisor-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868c0994e06637ba64441e54a1fc3ecde4cc85b778c560660eb4a41245168495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145376 Malicious code in neptune-postgres-google-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622b223702674fe3299b7155ef06cf2d1729d488c7776b02d1cca6d636e1ad53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147832 Malicious code in semantic-release-native-server-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5336a6c3d9a01c4a7de4e23e1c2ab5097ba50ed71354ad08b9087041207a29d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-thuban-configstore-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c313ddd34e28e09d2c6edd5fd809ad33e9dc86d5583a6b1a050c1f208727106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-ganymede-postgres-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1009d64190f9c6b9bc8272ae2b4ae56996f71e14bda1fc7a4695aabf713ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-carpo-changelog-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22816e5a878f034b46e10b257cb9d4853165734acc70317b7a6dd2ec0aa90a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1870c7f6969ea7f977b1d82de36603569644e0ace11ba6eb516e75c0cfa8893e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-meteor-superagent-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad564e5a541e26e18d5c496087d6be615508fd2c10b2019363648785905ee89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142612 Malicious code in fornax-commitlint-config-angular-commitlint-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55747cea2ed3e0e51c187a4cc19f39d780716f46703e848365db6e2e80b76b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-publish-ganymede-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4bee700dd60f89d7636e9dc4890f0ea34fa4b85a80efabd156924d8b4000d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139872 Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fc500675fae07b9a876c104374b27b82820a5d8bcfaad02b275aa0426a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142150 Malicious code in eridanus-markdown-pdf-regulus-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280fbe933f2aef105cf272fd45c745e56b45fc5f11e9d01d643c25d5fc4f1871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145730 Malicious code in oauth-farout-corvus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776aa8f7c9d309fe1c7adf4274314326d23bbc25bb64f2734590f54fd5bf25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145163 Malicious code in mongoose-prompts-spectron-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e602c1c1f17845de88222beb490ff65a987dcab2ecaa0d720d4c748d9beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139956 Malicious code in bellatrix-rest-blitz-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d051a410ec4e152e8429393d4f69c4e39cb62b3f53704d5f7a54d4a087b454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149559 Malicious code in wolf-polaris-zenith-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1643ba9c60e4293e98858a7181689d7e040b596aac65aeef89d18ba0c6ea3ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...