Malicious code in cli-celeste-cors-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7492e3952d9434eafd92a7f6c3705c199c7ed56c4ee9f13f1a3fbdeccbf70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-comet-meissa-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902446a464f790e026bbe1b3e2bc37490b51139fcc3970a97b23c430af7f9968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-gulp-docusaurus-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ef01acd555546ea5910b6af98dd333b727dec3a57bf809dc2d6ca984a08ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-deneb-upgrade-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6c00e3e89c4212a8ebfd8666bc2f8983c4e438a26efa2c2358e75f383953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-dependencies-foundation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de816a9d9f34835691b9477d61bfc913c7fd66848ec7a7b29e7c77739b65c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-wezen-sqlite-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e5922c19a5471a2cd81da29347a02ebf664e790a05e5b7c7d4481eaacfaf59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-postcss-dotenv-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc43970ee075cd25716951c0bb897ae904e4c67a131073593eb712d5dc1c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-mocha-colors-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d2e4560974c6e97509a5cc24fa70ae6c81ca4d820ffda5d7c4ca31d2a52876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-publish-pm2-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af92bc3cf8d5cdea73b493bf4af81a896241e1bfd835a03e01a580c40dc44ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-aldebaran-toml-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d65623a858a86f5a8079b505bd7222e63f14ec06fef9d9b87f4b81e67f018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-dactyl-nextjs-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54d228656bd30c22129a576bd60a948554c53a18f40744adf0046d7568bc647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-link-hercules-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a169dd2bc2f690f5f96eaebc400c1c5061f09e507d64c12e736118361cc2813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-firebase-mdx-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea3dc71068a9a819c018750ef0b3763afd9a8a07546f9ebd567cb74b9520152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143686 Malicious code in install-spinner-dagda-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142967 Malicious code in google-nova-spectron-webdriver-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc237c732dffaace99c3ac0ff3fc63dd30f2adba9b32354f54161dd67d3ab46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146307 Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140730 Malicious code in charon-polaris-socketio-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765198641ce1b82606fdd938edd1346719d47b28422f609f5126548b170496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145899 Malicious code in ora-webdriver-mocha-koa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264d6148006e14acb388e5a9fa325a0f504bdb13ba6730af51dfd4004aabd832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146757 Malicious code in public-deneb-capella-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71646657fcef95ff5edb1350b767e161fde867e8f784c1cd2a4f910a9f1e9912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...