Malicious code in sequelize-grunt-public-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe26f85418c84b4ebf3b7689d139f27ea4218df2384d25a80f0abe7254de31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-antd-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b73d5108ceb7964a0b3a0e61afd7965a64b68bf06041bb1b24837b5be84fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-callisto-leda-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d474ac48bb6136b5f28eebfe39fb40bccfc09cb06dec1492d3aa0382d4872c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-transform-prettier-stylelint-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d23032fe018322cbbf81c4a145ca9e87e09a57af0a91ea9d04b07a55c09e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-lynx-alphard-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9b55d95bff3b01b820e5275231787b88a0bedba36e9439919568bbf7936231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-chromedriver-pegasus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb003af6977922f52dbd2f8ff8af98ba4dfdbd3b2d6c2d8b08d9791f43110a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-wezen-nightmare-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f411fe3942ef410ebe4f961f8f7bff70042805c1bd5079c6d8b2122db7e44cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-charon-cypress-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6847fd56e5f61e5388f977b14d33e5665d8d11a56e30d5bf5db8f882ad91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85498b1cfb1363adf7f3f0607af18be5b0295e58123b95537e8af5ec9afe85b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145989 Malicious code in pavo-altair-native-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144933 Malicious code in meteor-sagitta-gravity-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828594916d9bd09aaef2618eea6d415ff52167a88339f2a6c5b4706e6f567eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-electron-builder-module-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b947a1600879a0087f5dd387c9088cf9b4c4500705fd718da8d57f73d9c97b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-subscription-sqlite-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e2511e9f9a27ff95e6c98e35f610b47432ec0f22b1470e637ebe6d56afe7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-carpo-cypress-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-scorpius-meissa-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039f8688ed4618719306a36c9e5c803751ab0b749811306decf282c7cdad2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-element-ui-dagda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809245058bb39895586137d945c96906e0075bc1f91d6b1fe5d8eb799fc0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-radiant-kastra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7da4a931fc7d11a9f6c84c5f2225ad0970d868b34bbe685c179c1601b593551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-galaxy-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02934da1a26beaa527e0dc78a17b97871abc9faa5d6644b390f36b5ba820093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-castor-reveal-md-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5365c0a699b02ff0b087a796b574c48e9afc78a41a294ebe89ae97b7c8d3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147707 Malicious code in scorpius-deimos-hugo-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927c90423c37a0e1916c96ebc222fef6f8943fb8899be71e305d6cc4bfcc9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...