Malicious code in bellatrix-astro-sedna-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e877580ed0a2f032f1ffa5c39273db2878f9aa5883de2cd9220fa632d0f1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-quark-geckodriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8529485bb36b06d6a5e7f1de1d6573433b873e92ec2d13dfdec664b1187575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-grus-farout-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7c36dd6030a02c4d9da372d362ada5727f66776678117752fc84d9d6c8ae1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-airbnb-europa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93def4c8b79f60fa808459f0c3eb104c1782bc6573fefaa8f6a433cbee409cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-geckodriver-ceres-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb5c2b79743fbc44bd02a924ba1b78e197e9329c3760c23d43ed4d5e202d670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140204 Malicious code in bulma-ariel-cosmos-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9a031357d89d2dfe40980d684f3f5c40ecca9c64aeb861f1ddb1f55ea277ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146815 Malicious code in publish-spectron-europa-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109c0af3a14167896afac3e991da3b3f5fc640bdb673e433085122320a2f2b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147536 Malicious code in rollup-taurus-antd-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc7f09a8172a6f84dff3f36916e21a8732e1de7d29a1a4fa802a450bcc89c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144874 Malicious code in metalsmith-dagda-ganymede-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5c0622cf531e5d8152127a4b85979e99821d6264b672e237b0c6af0473e38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139570 Malicious code in arcturus-ignite-csrf-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e3b9ed32ae320ad1acddea3e3a6cbb09e432ca21542a11792b20e4b4eb6fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141734 Malicious code in dotenv-parse-variables-proxima-mongodb-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971d4e3c75caba63c864868b49bfebd4f37e76c926e7cf9ebe3439219e30418c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139648 Malicious code in atlas-mdx-pyxis-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5d4a569c36cb93cfe22fb3e8dcdf66e0ee3ba72263a1ec085f04238964a5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143909 Malicious code in jekyll-markdownlint-leda-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4268ead218f453ec80bdbf052e30a015e7a56001c5719e42c62cbda3354e2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139298 Malicious code in algol-local-cordelia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4804f6c26a015c218ee4af9c94f675e49eb8f5d5bcad94949493daae11d0962a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140201 Malicious code in bulma-airbnb-node-sass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05b2ac08868e6c7fd670b15b48fec5a3be342154aa5b9a86612c8413c16242a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140636 Malicious code in chalk-elara-mutation-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1515b30dee8c82bfcebcb435e5df8978d0fc0d4f8bca09af47446eaa856d90dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147421 Malicious code in reveal-md-passport-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42df2a17816922455d422894949135bc0c3aed262172e07ececd4836aa13cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149620 Malicious code in xanthus-colors-umbriel-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816e1c6b313dd8cc06efc8b2eb7332f267ca478a69bbcd2965f31859ce9b0887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-zenobia-repository-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae2136e5bdbd05221b678c962214e1a8d32d1041f90059c0e5d329e1d48d0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-colors-private-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2016b08d398ea500476ae7f3915149632d7a439309de048e028ac5181209428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...