Malicious code in ursa-reveal-md-antares-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc48de705e14b0fc19c38e6070047b60ded65999d88f313efbde52229f4b8df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-dorado-hyperion-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8659173b63fc0521c5da9433000bf134a4cc63464820c15a17a0fabc844a3ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-sirius-ultra-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1615c16c9e22f037204875a7e2ea2e865b2b9ab7582cf0c51d171127d3b7a370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-redis-nebula-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105fc3f9e64bf199b43c2e0445127977e9c604d6964b88bcabec49ef31477748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-xerxes-ora-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e90b415bc455b48d6e9b02ca3d4997ad6ac8f6a4a2c73c86c9ade270e737c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-elara-mongodb-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c379c674d57bf6ddd4cc912a0a3a0399b8b2db79a58e7383a36469c02ffe92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-pyxis-prompts-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4410063892694cb79b5b19fe2c4ff02fc6d15dbf4fb3d1c26b36cb88f479fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-repository-package-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc976d3ed6b582841dba0a53f2ac7f4e88026b21109e58de73df97556d4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-solis-browserify-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40989ecbfc67526b1e18be46dcf17d5b24dd68bd0e2e3b1553aeacef469c34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-elara-dotenv-safe-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057511e08591a0758844f835214d5149e3c386d798c28dd0b6a5c0e6e14df40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-polaris-browserify-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeca10eedd2868420a67a14a83dd8861e9350b5413837f1fac9c3e8496cc52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142187 Malicious code in eslint-antd-babel-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0b97c319bc0fab324346fa6235b482369da554c688d9c1557de6fd77eabf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140819 Malicious code in cluster-auth0-json-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772c519c283df8f248742b2b97fa33752794ca5101efa6cf8fc76a445d26e100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147675 Malicious code in sass-loader-meissa-pino-pretty-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a246180b1e7c49c62f2f18f439a38315a0f41c7affafa8418bbc4b48d1a8f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143684 Malicious code in install-sagitta-forever-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5266316882adf444b57e1705002258aa5f6cd64e504264dbcb91c1ad0ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144896 Malicious code in metalsmith-yakutsk-juno-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7d8857f1269646d020d61a230349856e619bec10f9307c2ab5843d8f509f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140286 Malicious code in cache-telesto-antares-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2e5258e5816f646e8aa2e161245fc708ecb2160fbaea032bdea23317897e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147140 Malicious code in regulus-atlas-passport-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c316ba24ee4bf53cfaa8ce2c315076b48305c248711325116375ce2d8cdf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147688 Malicious code in schema-arcturus-relay-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf17e4c24c9b9e673c663e399ede376f3d5a92e1c679fb3908cadf2fa7bdf2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147970 Malicious code in sirius-pyxis-cypress-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99e2e262d6206a7c37e45b03e962ce60c1174ec7a7502ec42642eb7dc5a3fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...