Malicious code in google-typeorm-public-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe46e17bb922cf6b54c730f90d58ae9d373c147fc77bc4648addb1455e4fa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-pino-equinox-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda6bdcbe3cbb6ef8ab1bfa09ae585d6cc0e53b722c68e483091d717214b52b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-run-script-weywot-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b1e32708e609247ff12298f129e107d30ebeafe72b630f4eb6775ce62f1a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-telesto-fomalhaut-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc75f9ec58088fa096ac193d9c10c24553fc6ceb77a1aec07ff9b3bc91bc09ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-cypress-barnard-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102adc00966ba285ca48a5b0c9ef6bedbd9b1c15e55c5c56f7a6b132206d191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-repository-envconfig-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89bf2c00540661d925a3c568b3f07900ba1f4bbff48ba51c779203bc515bb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-europa-phenomic-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703167ef60682806e489086aa92d5992747677f48f9acf863b6490bb42e7068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-bulma-fornax-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83fd05f4cae9419b8910fd1ee365050b32f064077946a95916761e63494e2233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-triton-lacerta-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c84f81d63b2a3391cebfaf4fdbf55f15d5cb41615b2987e447e4980502d4c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146485 Malicious code in prettier-plugin-markdown-hyperion-xo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae3a09c4166cbe887283171af6a1441547a9f112d8b65ee4c1dd48fd5365250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145681 Malicious code in npm-leda-cz-conventional-changelog-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876bcf67f0e5f36d7eee5b6c9cee94fe7944d3a8c0dcb28b58c2ffdb424b52f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142901 Malicious code in gemini-lacerta-procyon-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb5a8d1e08a2534b0e075c2a0e4d15900f30cf9a48a01004bdd020108ac0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144501 Malicious code in local-wezen-dotenv-safe-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281fe684a136130d7565ab0e4602a9cd866bf34cc9f1ea4a1be03ea6ae16ccd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145674 Malicious code in npm-carpo-vulcan-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914086ee51ae4563ba23073d07e35f8b705aa241802887a976ff6891c372670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144245 Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146212 Malicious code in pino-cosmiconfig-eris-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93dd9d8fc57cb176b04e7b09587a7b5e36c2d4b77c0db76abb41f2fc0bf77da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139762 Malicious code in avior-axios-hydra-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf107bf1db4a8661d5f4e52fcdb8a3a86bf43c0f2d6f71ec9c10a8f7088b89c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149127 Malicious code in venus-vuetify-regulus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e17cee68eb004e87c9a313b67a9f1a16ca7cd3689e90a42632fe0a3b8157b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...