Malicious code in meteor-iota-ophiuchus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0ff1cdf2157479d762189676161efb8616723cf3c47dcda0abc29af08734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-materialize-sqlite-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ecdc85046977f03c2dffd2a11621e0afb79893017306e4ee419e68c785d6ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146379 Malicious code in postcss-atlas-graphql-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e09c839e7a8dd1bf2271918dfd6f0dffef915db2fca18e17edd957e22026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144579 Malicious code in luna-query-hyperion-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142e23ee5ab164fc5622f93b19756207d75ddf3f601955b5f9f00d999c2c42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148930 Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145831 Malicious code in ophiuchus-ophiuchus-hydra-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47788e2971989ebfda1e3e06af9e81bcdc202bc958dd8727b5529b76fd1c5c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149735 Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149772 Malicious code in yakutsk-jest-sequelize-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e8e8e3f60647fb8f627ae04557661e87923e588fb334d4d4ba33d2b9b02584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140286 Malicious code in cache-telesto-antares-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2e5258e5816f646e8aa2e161245fc708ecb2160fbaea032bdea23317897e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141326 Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d439e6d0efd318a80fa9c0aea306da0ed1764f4b7940acf1510246b972af2942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147417 Malicious code in reveal-md-miranda-levels-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c748cdd6fd77c1cae9a437cd5bd642282b813a08cc3826fa783055b41a5c2d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143225 Malicious code in helios-algol-norma-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fd6e85b9e1976f017059caf3a99dfac7420a381fbf45cc11c46863a194d26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141303 Malicious code in css-loader-gatsby-oberon-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8a19af4e44ee7bff5a71b4d40822481fb8ccc14538ae978842ec212c121d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145355 Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cd6f6bed9776d6240e81efcaf980f3e86f7f36bdacffd76d292c2d9397deee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146986 Malicious code in query-winston-taurus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cda3d47eb443e153b268e3cd84bec534376aa447abc556d9b1fc2afb49c208e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141756 Malicious code in dotenv-safe-izar-gatsby-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe616df749940f75685ab4e34b7cab78f5ad935cee6c5c5cc11d3fcfc1d3820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-apollo-upgrade-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6297cc76699859130e9718018440cd30c840913c432fca2c2f56741aa440712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-nodemon-apollo-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c1304784231109d0525930d1103480a1961a3d2e7fcce0f5e2b0de7f553d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-eris-cordelia-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6aae70f9a85170a09805294037f5b15256af3293503306536d38e121f985ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-kinetic-capella-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36738fd5391a2e0a3836541071bdde4fa6d1a86665a79160d7c8262aec63014d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...