Malicious code in test-schema-blaze-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13557f302c015eef445b04257dbb25a80d80434549869866fa18e85a650292c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-jupiter-antares-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9475e6896f644cad679372be114f300b3ac25f0ab22b63a70f074f55dd053c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-event-stop-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6630ad4ab8d3fb3fa9067999a33f750b0497f8ecde88df05ef9105eae291e79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-eris-regulus-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdd26537c10b0709762ad5b79a09aa551a46524eb4716af1b162bbcfda4a492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-protractor-wasat-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9511c4eeecf15d09a5994d24a1e38e1d7eade75e224307dcfbffc121fc6777f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-remark-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b91250cf24f7949b14f40c0c24691e6116caa06fea0b5b25539c3f519bd116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-babel-sadr-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa032edc1a5d099b047f36cd37cee3322cf3a48b526476330b1342d8f41039db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-xenos-xenon-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c744d5eb04b0340e2461f09e10bcadd760e62c092ed3d0cca00dad88f572b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-weywot-style-loader-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e91bbc11f8b148a8959b52cf9b8d8450fe3dd51ee5ffdddcc8362d2d244e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149742 Malicious code in xo-adonis-callisto-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86b777e7b69686863ef14110bef4d129fd9013113a9688fb043f551c76f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-algol-flare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d16774e2cee4ea961f6c348bf4e92a499bdf16408452f147c123b2cd2506eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140327 Malicious code in callisto-cordelia-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5408d4585ed37f98fcf6fb078ab382491ab854e3e69db0c57fcc3be607c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148327 Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae29f63ab3edd79a6f27157b2a92d2fd2d219f65bf803de9275b448418c9dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148511 Malicious code in terser-centauri-celeste-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339383723734c046325b9da29001c1e0448f40a44486961005b3795aa6de17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149759 Malicious code in xo-wolf-perseus-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fda59b09340bddf64be7b10b456fbeef410d7c32413ad9d563d889dff6205b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148717 Malicious code in toml-lynx-pavo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46c7c4c02143b1da58f900d319a0d653ba3ebd915bedef7b645d75a51b6cf47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147657 Malicious code in sails-terser-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b5d4a721c3461428afed260576084177aa8a1f51ebdec6342d0cc814bd1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141349 Malicious code in csv-neptune-fetch-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb24c5d3b535a0b5cce2ce3b89a0d36c4c30e0fdd5322f5b0ca38d84d577bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143785 Malicious code in jabbah-nuxtjs-spica-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c6404a455bb29d3f9893290050e6e8982e6a5dbc7c9429a4f25827345da287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...