Malicious code in winston-dactyl-figures-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a6cdbfe14a015e68b53836ca42b5a956f3b9133e9f6f9fe21da036ae347c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-meissa-zephyr-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00577d92ac72c5b95e8696e92641bbf766e8fb2bfcf75a4be0fa409f93fe250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-proxima-luna-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0faad48fe24aff5b595f76158df0c58875bb03b30f753cef677da3adff72fc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143979 Malicious code in json-passport-eslint-config-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aebaca9d83597eaa315d6064a074b23ccc4564c49240edf92a50d5482b736c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140804 Malicious code in cli-node-config-eridanus-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c9e5f61f95bfcf4d2b38af3999e0c0645e84cb36f4d520d8df699b673e6970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142061 Malicious code in enif-rocket-despina-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf55b6c4449d96986c74fe612839facffe21b787d457d641c848b520ebc402b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148886 Malicious code in ultra-altair-janus-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5c9ad920673d1292343afd8eaafad8a8ebb75d99982e3a69f8c00258a4f85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139168 Malicious code in acamar-cordelia-hyperion-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5122d370154d870ab49437c26d3bc75fa81b827695811b0298ac76a122f1de6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144050 Malicious code in jupiter-bellatrix-version-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9767891eaf351f85b649524ef9c02582915d6cd03f4a573811aea342193db68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146909 Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149115 Malicious code in venus-materialize-middleware-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edf3762282a5e21f97e55705f10dce56e313a7824add172bb388fa0ff9e452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147128 Malicious code in registry-fork-terser-webpack-plugin-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5f80d581068875ac320615ae15a242874ae033d46442d41454a22228f38a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143055 Malicious code in grunt-bunyan-convict-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0be9f17a0f8f2b3a4f62c63c7461b5adced413836aa1b4f216201de7a4d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-indigo-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3276be6f7155bbda1c434bbb2706834047eb7f9ee634526192a9ab077e062be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international-amaranth-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64acf5ad6a0f907676e6e78184a5888e898f62a99afc79b6a09336e7615b8aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-sapphire-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b809653fcb23ebbfe1d0d721d1e3f83d29617509c15eae8357867cd86a484ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138742 Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-purple-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88da381262350f4dcce284e6843b6eaddf3a9a5e651dcb0e597d9b86213bb3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...