Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-adonis-nestjs-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb39ffce40c8af09af9eb6ddb26d2f4ef5c413bf45dbc9bbde30b530839a19e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-test-elektra-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58cd74dad8498f35be2b42b9cd2779b127b6ad45ea4954bbc77ce2fc2719d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-resolvers-wolf-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bead6dc416b174f4b3e1a8b7173da225f9499133ad4af86d6e834959ebd09d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-thuban-child-process-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3f1b19c53e089c5c8f230f49854000efa6afdd1b8db9e5f890dca0b7f5e9ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-ceres-loglevel-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d425ced84185718748eef6d19c741cb046ce77c9e96bc494a57beb19efbb855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-fetch-gulp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c4da9cb7d36cded05d8c1bade5ffe9c7b233c9b1c4b31e046664104ba0b11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149078 Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147595 Malicious code in sagitta-europa-xerxes-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b016074ca2bf81d31113e17620b1a0ae9d8d9e1abef97cc8f872badf16e6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146831 Malicious code in pulsar-farout-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936458586d508d170d49bbd490dbb216acb183554cece11d629cd5fddeff09bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142770 Malicious code in gacrux-hermes-mysql-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968c91bfa918d1b575481a21e04dc8ff86bc84701ba0de6aeff412ae75a289f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148300 Malicious code in stop-package-phenomic-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc099d38b27f19ea7c371913a1c7be9ca31b14fcc5d5c992ed20417fdc8eea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140058 Malicious code in blitz-pulsar-bootes-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f143c148c7e4c8e2bb84556a6a8e227304fefdc3d346c1b959bf9c04f6f75559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142008 Malicious code in eleventy-nightwatch-tailwindcss-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0154347a1de85eb8f3cfcc2d53c17da34e78c91e8d4ac0c14e7bace97e22ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146063 Malicious code in pegasus-vulcan-framework-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49c20d826fc3caba360e82a06dd11069ea8cb60d4ffcfa801f351b1e7f5717c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145199 Malicious code in mui-cypress-blitz-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991e983f3904a6d0ef9d7df604599d90c9d1225c9f60e4d425316250f0264ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138989 Malicious code in running-chocolate-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb77eade9c851555770d34c459c181ac2b42fd29241f721bf91dcd1693e23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential-salmon-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b710994e484177da233d848af8e1549c3b277f9d7efcf01c868add0e2abb1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-white-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81dd3f6a1c64968e6d832222379c22d81a0d68cdbb8d92aee62cd51375d7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...