Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139361 Malicious code in altair-pulsar-run-script-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e367dd0fdd11e08914bd32ac500f43226ebe953036e04f46696cb44a3a87a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141834 Malicious code in dynamo-parcel-helios-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca8b68bffe089827b1bb978a267e2a3fa9a7fa61f0fd932bb4bee41b458a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-odin-barnard-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538fc2c10d714b98d71e783cad8637329ed0e85548f6f23de01791388951136c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-colors-auth0-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ba7f415d5cb37f209299599f124041b0707adad331912f2dfd0d7ca5470e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145790 Malicious code in odin-carpo-init-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144639 Malicious code in magellan-gravity-rehype-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07de925dee10238a4852a1837422b54d8a5857069876a5f9a55053132923bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149197 Malicious code in vuepress-pegasus-gravity-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f30b9d98da16f6d11401b6e3f4e7a2a556ca0adb7e3e59cb98234cbe0a3409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148920 Malicious code in umbra-mdx-algol-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758df8ad0479ec84fe2bca604e978cb5b21d81fde691a36929909537f3b785e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140290 Malicious code in cache-xo-ini-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e218cef6ae3a02747d8688df10e4dcef93e1bf188d5dba1a9af3d41f478cca01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148166 Malicious code in spica-lint-solis-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0bc74a9bf11f5ae9f2d2951d34d018a956cf3d25f4ddd5b84f47c2335f0a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140023 Malicious code in blaze-hapi-cordelia-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2782e9e52c196340de0e31caff03aa3bee08b7d416ac2a4d310277517eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-sqlite-eslint-plugin-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec435a93019b858cbb763aad9940adcfe0490b0100a4c6be9a8be1ec65a3c24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-thuban-dione-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ad67153b6a753f31c031e3c5551906677bd3c5e5b020151ebc1bb704100e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-virgo-nashira-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5313f53f3f660bb8e9d871ae08b0f9251fc9200b75390bae8273643364e9b20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-forever-cypress-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bec960c5d2c7b30446df4bb08b2972ef4d36ff312d03c3c4bce4b033e08d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-aldebaran-postcss-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef214a4133030f8fa65da187e1e76bafcd0e723c5e4aa8b2eb3bf3d7588f2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-elektra-perseus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd342f72101619e4ef799aa2f4b4b347f80d9530a529c912838d7ad3710599b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...