Malicious code in metalsmith-scripts-spectron-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd9cfa26e68fa75cc0c35312268dac3ccb76a967ba3fc4234c6b2d2affd6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-jupiter-upgrade-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0743336e3ae92ad5c0414f0d4f6025343f6a1c877fa69ce7ba4305bca27db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-barnard-server-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fcf20659588f41f80abb03c011da01e1bf19d78058387446b81977e811089d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-telesto-fomalhaut-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc75f9ec58088fa096ac193d9c10c24553fc6ceb77a1aec07ff9b3bc91bc09ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145674 Malicious code in npm-carpo-vulcan-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914086ee51ae4563ba23073d07e35f8b705aa241802887a976ff6891c372670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144245 Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145281 Malicious code in nashira-puppeteer-eris-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acdb15931322ad653a80ba6c10832d92347944ecd041b0e916f5d0d8ecc2e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147471 Malicious code in rocket-jwt-webdriver-mocha-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9151497ee42a404985ad654d25c422daec606cbdcf1cda3082361994b63dffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-docusaurus-docusaurus-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1086f199d13d933abbfe5f631549cb046e455883a60b41cc0ae56d86f83e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-mocha-magellan-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b92ad39ccb22fe52557c637972644fce9620f731d30fef074566a3a82f31f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-vuetify-websockets-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157398aebd6c7afef671792bfbe7072fe28cb0a167665eb11bb9f03a9a270231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-cluster-wasat-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870d69410b64679e12b4dc69b45ed871b6d833f3aee37e7b02406623d15a891c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-jabbah-enceladus-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a932f8103657216151be707fe26add8546a8003466cebcb7dfc30570c7fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-dorado-phoenix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c06dcd35b1cd056dad87509186667ba2544e0b69410c71587604ce328274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140441 Malicious code in carpo-ganymede-kastra-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afb774a53ba565469f8094ace021d2bfe40abb0b43530b02ab62cd932873e43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148374 Malicious code in superagent-build-spinner-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e98cd0affb029888ab835e51cbcae72cececc82a87445c1f0b863fccc699077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-dione-meissa-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bc63bed0238baf530b564efbaf9960fa464e7b07b5646eae445ca789e121e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-halley-non-blocking-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f102816d1ca7c2c09d3c6c14aab8bd1a8a6f2a28ff7782c0f63b68d47c0a70cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146050 Malicious code in pegasus-rigel-bulma-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10efe745ce9a8c5335e8fc1b7f9fdee45f7376be426c0b9e9774e91939f7c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...