Malicious code in adonis-polaris-umbriel-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06219bbded3881721c3e959ced64cfc307b212d788ccb4e83daffbd8a6be1524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-airbnb-node-sass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05b2ac08868e6c7fd670b15b48fec5a3be342154aa5b9a86612c8413c16242a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-hermes-mysql-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e284c810e73524768e435e0193cce5ab7bd48efdced7dbdbdae1e11f48cca83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-polaris-publish-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a524a23adc66ae35233b4ac3a615980fc09742316f1c7489c455b6f974a061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-nebula-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e869b886c6b587ad65d90412d52a84099eb19a953c7c45b7087ccc4d3723aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-mocha-loop-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c79f04280d8b86e33821a1d858105a2658e0adcd0b02df7d2a5ff349d20e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-nextjs-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-eslint-plugin-google-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1a1bbe19c10c90b8a467eb1130aba1a148edc3bb3b8ea42919a5377f413741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-private-element-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256a58de5656427ce43274a191ffc9eef82d97edfae23fa63c7f134e0113a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-phoenix-hyperion-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952476952f00c78ac38eacfdc6ad9794c14e54caac5c4693071065f2db63bc34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146698 Malicious code in protractor-sagitta-xenos-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375ff0f14b90d3c243abb0c7b21bce0800591a64aa75e666438289eda3647e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148400 Malicious code in supervisor-publish-cosmos-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568388e674b156aa64cb527778eca4e516be31d4c94ee45e60433044ec8377f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140047 Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142869 Malicious code in geckodriver-jabbah-middleware-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6d36ee6c729052ef5490e2ccbb9ea74a486340678f9672debe78bee3bee48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139943 Malicious code in bellatrix-luna-markdownlint-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab87dcd62e2f0e2d1a152fcb986d0c1c03a209224823858cbf463010da48b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142891 Malicious code in gemini-arcturus-ursa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142795 Malicious code in galaxy-virgo-reveal-md-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d034c71ef9a2bd303536b3a128521aaeb01ba40650ad9fff9fd2ebbb812a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149752 Malicious code in xo-nova-thuban-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a99b7389696fc93347916f07e6163ef400c2702bbc43e8fcb450d678c3660936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147742 Malicious code in scripts-pino-event-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128e90a0f35a135ee0249d752b33a18aaea7dba4c4b0e42facd5a5fc7438b978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...