Malicious code in sirius-impulse-node-config-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90aec7674c1a5524fc2ea92edd26c3a9e2665afcaff60074fe96808a1fc7b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-testcafe-chalk-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51d2d3f0008db6e091e6cc177cb67d46eb5d7335d782a5b703409653d2bcfdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-typeorm-mutation-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61272cda7f06f3fccb46fd29779e95028acbc6fd37fc9c1f6a0c6a66b9f59e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-cypress-delphinus-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17eccad331b7bf36c8662f97af8938cf65348ccc3a67e2274b6676b36bda5205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-wasat-venus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-nodemon-pavo-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf4fc96b4296cca28d89142204c17c327bb0d03ff60b782c9df68ada21a55b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-koa-delphinus-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320b5b67e6f1e7136417614408f330f0b5918859a73646fc895485d596b3c69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-prompts-ophiuchus-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd762064fe507b2ea3c8881ea3d2ed43a20683cebadab4ebd9480060fda0a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-solis-aldebaran-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46f2c78e342536e68a4c350a5c3dd11443b5b602f6fe14b57565716a0de7390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-cross-env-json-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2776897fa85ee4c9d70fe5522af98d5ad8fee59c900ca63216b4324d8f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145815 Malicious code in ophiuchus-eris-wasat-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e21e88e18b9084e7aab61b19c9e629c5c6c8c1340347d39df9bdae2a0de73c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145346 Malicious code in nebula-mdx-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597abbb8f843368a4693e7ff646c15e6d201318b0ac904a36d5fd327456cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140374 Malicious code in canopus-spawn-quito-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da827a28fd41036739f4226ef76721a4ea637ded5d31c88566deae523cf4242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142704 Malicious code in frontend-hydra-morgan-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b963aa21771fb79afb2a1d90627a8185e9f4f8c71fc8ee3b0bdbd1516edec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140174 Malicious code in buffer-stop-dynamo-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ec4f8339a37679c934d37c9ed98362b947cbb4b526801422f341815e3d4c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141973 Malicious code in element-ui-luna-betelgeuse-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2fa7918448fccb2d3813a943600f31453a2259a8ee9151f0ecf849537539d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146963 Malicious code in quasar-xanadu-ophiuchus-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b19c5c472f26b3df74519b8b1486b54c20f49ccfb9f17144362ea87c8acebff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139294 Malicious code in algol-dione-markdown-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85222759ae1d90c0ef7fd9b7ceaef96a1b0046b114316d86b790483370a812de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141873 Malicious code in elara-enif-local-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef543fffb12161f3ec3777479f5e7d7b6efea83867841b88fa08b5aa7f5cb74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145886 Malicious code in ora-jekyll-nodejs-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99ac7ea31cddaef6cbf34ea2f14a323c48b85e8610b6bcf49716db4c0d7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...