Malicious code in halley-hugo-node-config-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18d81c7012eb412f8679db20a766a516042723987121a382c43cbce0300fee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-pipe-hapi-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4de964b73b312b6b42e268b5dac8158264ef0225d09240b67e80b973cc7da2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-webpack-configstore-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa837eb1c0466d00c69e8afd0e42d09c3bab5399f484e35f736cde5231a9dbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-nconf-quark-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3a3d0303ed5512de8dc5c006cf26b69d0a9a5dee11ec25b3c8433f45fd3631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-protractor-json-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0cf775eda6da5ee72ec9ec108786c8ff2381ea7d373895eed288b9c05b03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-castor-rimraf-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53cb9c657508e7f2692c16d60d43936cc7507391d4e49684b451e4afcad2815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-gatsby-antares-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9221153c0d07120e15425cec2c46f08a5cc1e742d755211e828a0c45e653843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-magellan-install-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f908817c72e81189c320433f0b18701070c54790ba35cd5de6436e0b750942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-chromedriver-tool-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990e83ab00588f55cbbc327d5e58b05e80f4e8faa1ec96c2ed563f5a1f8cef50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-thuban-dione-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ad67153b6a753f31c031e3c5551906677bd3c5e5b020151ebc1bb704100e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-phoebe-aquarius-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc05a74a579980324723e78032930d587d6d67a1b120c30a59e228eeb4a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-aether-thuban-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34926fe5717955e2b3719df604136815a0cd579c4e9b0a766baed82f8f5dbccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140898 Malicious code in command-child-process-perseus-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3677b217765d5423fe859eadb36db03aa7596c2d9df7972ea04455361e5815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147184 Malicious code in rehype-slides-vuetify-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd9b526d0706b2613962f6026d8f4dd893e249122ec8cf8be17968a7e91db25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140302 Malicious code in callback-ora-perseus-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df8d91d49042e84b8b1a207cdd0e65854694438160376238b9ceaaed621a695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146800 Malicious code in publish-phenomic-phenomic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a89ad163831682a4f9c393633188ef89b0371d75e58767e815d7e03d8bec4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145438 Malicious code in nightmare-indus-nodejs-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fd1cc37d46f1a1f057268f80ac023e3523d32064151e456dbf016869d8c97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142554 Malicious code in fomalhaut-standard-slidev-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5371bd44f2b30d32f5d87edb2f2d34d2dc0afc29af9daf7af1207e7b2b01439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140921 Malicious code in command-scorpius-octans-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703d0a719bc5af84b7e2aef0b2df611546d2041a15a9d8bc5055dcc5fa5c5b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139860 Malicious code in babel-heka-virgo-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840c87e2ba9ce27cff91ef872cf38e9c82b5182d865525076fe53fc0b1207117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...