Malicious code in framework-halley-phoebe-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a41b1cea0e8542243eb3f72e7489fb8f21eecd41fe1e4965a1acfe533e66c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-csv-antares-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-dotenv-parse-variables-izar-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb3705933d0afb8257fbbb769f307552c28fc1caec37d0f89bcfa8b30e937eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-algol-flare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d16774e2cee4ea961f6c348bf4e92a499bdf16408452f147c123b2cd2506eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-jovian-yakutsk-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942daf1809f1a933ec556875072240b54cce259a5cafdd8782ecc48976749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-octans-kastra-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb07606dd886e1bdb0d5bfcbbff59795c376489c1df9985da7c1ba407f7d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-spawn-dotenv-parse-variables-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed298e63ca52c57450c7e91203459cb0de3fb49027e441425ea32d0c6cb9db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-delphinus-buffer-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5e8c03989ae055f37acf391f30e62c3186125cb4d040556c28201b59b96f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-private-module-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc66d2a257a4cae15833c68e90d0d126ae595afb14baa589948057e3b8b1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-package-bellatrix-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8043f8d64d81e09202a480780231d2868258e28cfcfad726b58e6de7858a6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-sequelize-mensa-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0ff8cbb44b5e6aef3b12f19a391df695716e76d68aebf347771f7ae51fb08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146537 Malicious code in private-ora-react-bootstrap-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f70d86f10e498a68c8467eb0549e813ea9e7d89fa7faabb6bde280ca072604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139625 Malicious code in async-halley-adonis-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c49800a339e63e2f06a6f4c122c665e86c4094652566afaabe5ae0fba35868a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140274 Malicious code in cache-jekyll-pavo-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b711485d592350a6a83a3dabdc407a543fc87d03c86434e29a65601f32010d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141239 Malicious code in cressida-nebula-sass-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3575dab522d0a71cd76a11b1ffb22109fe401d11239b6d29d146aa34faaf0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141349 Malicious code in csv-neptune-fetch-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb24c5d3b535a0b5cce2ce3b89a0d36c4c30e0fdd5322f5b0ca38d84d577bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...