Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-dotenv-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4bc932434479fa4e81f262b0c82cb63b971801af78eff50112834c003780c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-loopback-sequelize-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41931976c004d89c852a678bc51be3e40ffa196f8850fa53ff966d073391c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-eslint-koa-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3f0f58d2f73595ffcb105ce5fb3977d91e5a5c7bca9d99dd92da82d2923b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-rimraf-subscription-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ae0dfc03d7ef3da474f94bfe9820f5263c24effedec038236376a4ddf6da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-oberon-install-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98c11b8e2be55ebd3072519b7f90b1d535d45c258b4361e0edd5ca4394d288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-firebase-iota-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94332727a2aa8c02e041f58ca774af62ff4e6988d385e78bdc86956bf5f7f31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-cordelia-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5408d4585ed37f98fcf6fb078ab382491ab854e3e69db0c57fcc3be607c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-ceres-luna-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7a97f730f21cd4e2b8910f8c1586bab544db567eaa521c459296caeb2b0542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142026 Malicious code in enceladus-delphinus-spawn-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16313e0e5d3b079b00c95ac4307930310b408c15c6b1edc2f86d661ee9866a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-neptune-phoebe-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d81a737a925c43093e9812535b6aed2ab1b2626fe41ff7c380942773a9612c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-dynamo-foundation-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b3b669ae32646ba1904a37fbdc812c5d0f58c8de7e5ea540f79e65395d1991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-html-webpack-plugin-child-process-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c748f511d4cd75bfcc08bada27b0c236b32a30a0db4a112c1e7c76ce1d6510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-cassini-gulp-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0cb35f2bb29d0c1fd0f9a34a1c8da3a37d641f3a35dd31b92417b2bb7f8b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146458 Malicious code in prettier-bootes-foundation-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53c7346225795dac3b7360459040503656b008241b0ce31c45b2c4c8d522653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142755 Malicious code in gacrux-chromedriver-cosmiconfig-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f882b9247107fb64a948c02c6d307448b291c19157e87e972e947643ece1623f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146425 Malicious code in postcss-xanadu-test-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829bbcc100b6a0075043e2dbd7df90af59ab633374fca956c513e20a11fd2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148963 Malicious code in uninstall-octans-procyon-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974400de422e2a3fb0d03cf40d45a0476bca83b458b272e5638ed90165ed00e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...