Malicious code in barnard-neptune-celeste-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147439 Malicious code in rigel-radiant-uglify-js-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85630c33cb4c0ec6a482317d825de7dd864dfc1abf5642f7f91212d8139d7c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140736 Malicious code in charon-start-miranda-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4739b0491b5f29158a524432828b6abf6fc274c2a323ede927229fea9fe88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143938 Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147802 Malicious code in selenium-cypress-izar-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b3cabd7f11f9dfa17efb7e42f9c91371cf54fbb439240bceb7dfa0e57fe170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146067 Malicious code in perseus-ariel-andromeda-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31a6a66ad37cb2e85b252ac93e639aa708db96ee4e4ecea8f7d8775c5245d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143720 Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b67d0947219d9c28f83df53a00911736d07bef071c3af1c08d8adc6e483569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145935 Malicious code in package-lacerta-flare-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b12d33c2b7f19771cf94dccb61768ae2e06bb35df870afffde0794f6b13a9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141080 Malicious code in convict-mocha-castor-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf50b62bf29b274dcb258f4cbd7260d8799e01d06ed3dd44267be145c4590df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141602 Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139876 Malicious code in babel-xml-config-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704102e6299151255ad2899537203756fa71f9da3d5977119078cc1302d822db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142208 Malicious code in eslint-config-query-cosmiconfig-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d4f67a49c2f8660c00eb78d5b0cd0ee38842af3b08524b54732d34fb48df93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144926 Malicious code in meteor-pulsar-prompts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea703e4ae5834db4e876cc760b1a58ec2cd07a7e560a94aa532b291a434dab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149722 Malicious code in xerxes-testcafe-sqlite-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e45bdaf5ea929a3a996d1e89e1f31880f504fe467aa313d14ea669a2d3d985a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143188 Malicious code in hapi-lyra-europa-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f82c330c425d4821d5ebf44a02c1d02a32ed95f93e53592b907f5104a831de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143620 Malicious code in init-europa-cressida-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdb0eb88f74e2971fab435463c2674b6f456a682d7e46e08e6eb43e1dc34d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144871 Malicious code in metalsmith-build-cressida-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5013b4dca24d60518ca66a9e686616355a3dfc7e97e90c957bcdd137193aa8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140310 Malicious code in callback-request-server-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32582146213f4e818a6adcaf53f077494be4fe9e9cd59bd6c4429b5d32381c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139404 Malicious code in antares-dagda-middleware-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ffcf858ce15c8cf2b6903a2a67f79e923a275ad287c517e0f23f1657995130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149119 Malicious code in venus-procyon-test-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb79d6f006a83101348957e94c03ac8895c614f12e474368f72140f44f2a2491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...