Malicious code in chalk-loglevel-io-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead7d669a16636bce25e9661811f5f47280b40ab64ea3c1e3cc047c9667dd643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139968 Malicious code in betelgeuse-betelgeuse-carpo-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9255a7aef8d17bfbb639e1ed68efc3bb23a1a2f2b680f8f22ad8b517075a3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143402 Malicious code in hugo-spectron-webdriver-oauth-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0ebeb42b34d178ed1859055aca3c46a2421dea6dab1676a05906f340af7f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140208 Malicious code in bulma-chalk-rate-limiter-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bbf56c33e1c969c874d1a9534c05a591a456bf9708031149daceb8627a3044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147784 Malicious code in sedna-pegasus-graphql-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba74f15a1ec971342125b46b02655ae8d84ff85e5b0090ebee93b6711e752b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148889 Malicious code in ultra-bunyan-cygnus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2e41abf9245703a734f0eec2e691c89b7d67a1ef3f53628e3b404f88f4d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145636 Malicious code in norma-command-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f12398e16b7a7d7fe6846b979eedd67f002e985d6831deffbd3e08f3b1f94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147400 Malicious code in restart-vulcan-slides-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1416529f490fb914cb006a56abdab3149c6a5548526f1b0994d74c7e60aa2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143600 Malicious code in ini-puppeteer-sirius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165079f96f534969d007a41855a4d7f2ed41baf135f410520c0d13780012190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145644 Malicious code in norma-iota-superagent-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317515e396939c7b4116b7f35bbb26a114b0293b399cec840e983081cd5c2b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141556 Malicious code in deneb-regulus-fork-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c6bd79fffbe62f81884637a6ed985b2a9026e1237ee0222ae438709e8275e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141097 Malicious code in cordelia-chalk-warp-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c68d77b2e4bd7da1bdfd033d264b648eddcfa07a88b91b57c2db7dfc573149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143200 Malicious code in heka-apex-firebase-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41f0381091ae082e9458edd8f1ec765ed4a9a451424985ffabe6a53d08441cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144361 Malicious code in levels-octans-octans-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0117f2aace3537dee47da118ff5a43d53af2aee4b5e66a0fb6703848f77f02fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-xml-sqlite-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709c64060dd44b375c863c7269f173ab61ac4133f1ada61d1a9e751492aeaf9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-betelgeuse-barnard-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8988181ea5ddba4cc11196940fce771f29fbba5281f1d6fb5f88fe70f35418d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146873 Malicious code in pyxis-cors-lint-staged-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff6de8a612c21ba192af4d769dd5031ed2e5826c6cc048594abc611bfac9b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142970 Malicious code in google-testcafe-apollo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b892143c28a050f926f84699d2be8bb573669adcab03b0d52a3668e709575c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140852 Malicious code in colors-init-slides-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5365fb7829cfd8ab509782ae75c027abe5acf1c7227250c2f9bce12c2c4d1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...