Malicious code in foundation-taurus-perseus-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0907b66f0151197653b0523e5564987d59fd908666612ab7cc3ec0f9f8f32344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-jsonp-sequelize-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00a5abfabe04224fb65871927d49042ca24e04932ace2d1531b09a6386ee04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-nodemon-acamar-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8c7523b07c5d46134438bea9a859da7b275095ba7d6aa313e5e64977864977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-cygnus-sync-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ce14a4ddd7e7d11d764543dc23faf3d5934fb6001941a7c607b55b5975b389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-grunt-lynx-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1ba9d3e7d79a9d0026ece280516128249ccf96c91cdb61c89adc5bf8d80487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149449 Malicious code in weywot-xanadu-yaml-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af256ea19ec7939f7d812a35ccd8b4063717d2babec01599fb27e8c8eab0868c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146237 Malicious code in pino-pretty-inquirer-ultra-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdf249268ec831551ac3c3a12ed6bfefab705486213188577886fd1647d1dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-javascript-update-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdafba81fa85aec8eb3d74a182a1360b3ed82de57bb6c85a9575ab328decd44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140963 Malicious code in commitlint-config-angular-ganymede-nodejs-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd879ab632f0dd68339b7adf07134b5953b4df890f07de2df9bb6408002bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147312 Malicious code in request-server-ariel-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab9456315197599ddcea0392f87eea221db5072caa463e66a4a04e562bad81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-install-impulse-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00721d1e761c857e566783cfc81bcc0e6ad51ebe3a2394924a68755be13da065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-helios-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443c660eeccc84458663b73683dd4f9945a478b35f6e205b836a99b218487f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-elektra-query-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500f63431257f1c06eeb57bdf809169a3a833961b9df76c544c642bbf00efdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143925 Malicious code in jest-heka-wasat-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04249879ac576d79fc9e7765efb7d944f2ea8639c65cc9aad3dba332dcfc98a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146611 Malicious code in procyon-procyon-quito-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f27e5c9bd6af5be773fcd7ba16124776345d70b19f6f817a3a98097bd1d0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149311 Malicious code in webdriver-manager-cassini-husky-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41067e64b0e1a53419010feb07b80e405e5b8767a4ca1044d7733e3a7119495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139570 Malicious code in arcturus-ignite-csrf-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e3b9ed32ae320ad1acddea3e3a6cbb09e432ca21542a11792b20e4b4eb6fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-colors-private-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2016b08d398ea500476ae7f3915149632d7a439309de048e028ac5181209428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144623 Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...