Malicious code in rest-exec-graphql-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e058454b52ff02631b84926bf7b5588d9d267001a3788c2702b7fbac6398f356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144046 Malicious code in juno-zenobia-kinetic-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cda1f7e16474f4db77e1627311d6c2a20cf414dbecf946bfc210bf918669d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148817 Malicious code in triton-ganymede-janus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d84855f4774d7e9b77b3a1750e1d3b87f1210412e2f75f70e5024ae188d902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148640 Malicious code in thuban-apollo-sirius-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ffb6700a7e0fd845e376455a5280e4d7c5ead3a5c6ae9020842cfc8f38ab6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142139 Malicious code in equinox-xerxes-convict-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8a218e391950bb7e213b36959360050fc42140f58484814757055dd9ca5a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144275 Malicious code in leda-jabbah-google-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5d69cde5ef8f2e71faae2ebf02639ed7e17058b5e0d56f3a0b45189637526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142217 Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144298 Malicious code in leda-tethys-webdriver-manager-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e0cf12230f0cb93594cdef17f935cd48bf7e192735dfecf235a630e777ccb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140123 Malicious code in bootstrap-terser-webpack-plugin-winston-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c70c900ce100fa38a9006c7544ae598fcfe7ee0b5907a4a48e068f95db4936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143810 Malicious code in janus-firebase-postcss-loader-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c907e58d3064898e9b9c09eda9c01d441442c88ad82927681a0e077abd4c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141334 Malicious code in css-minimizer-webpack-plugin-transport-spawn-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4726ae38cccfb92349767aa6eb73f557bdef28389337380ecb62004c3fa5514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149044 Malicious code in ursa-bootes-fornax-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6e382da872237546ac26a0a389df759f947829b129c8d324ad31240b58c7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146587 Malicious code in procyon-electron-builder-reveal-md-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7518acacb96de24373340279d53a0148b892df20cd202ec9fe2984a89e00f5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146115 Malicious code in perseus-sirius-proxima-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd3f78f5cdd8c01a25adeca745497990e214ea544a47efc4370974b71923249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142704 Malicious code in frontend-hydra-morgan-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b963aa21771fb79afb2a1d90627a8185e9f4f8c71fc8ee3b0bdbd1516edec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146617 Malicious code in procyon-supervisor-mongoose-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5648c869f07e16773d5b96576042868921da16a9552c5dfcf968048dec6e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139701 Malicious code in aurora-luna-ophiuchus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7529c8b52158312b60e08e1fc053d2008b88292b60a340f064f9c5321f2c53c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147419 Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942efe758bf59cfbd35ecde32f1b9cba47a8915da2bea6632870da311e5ee031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...