Malicious code in juno-webpack-ceres-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f77539ca50b4cd121834f2c9ffd7d72dc229c148b983939f45728486a3dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-hyperion-fornax-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e03baf6447776f6d27d28c510f76e3b0afd0f980a31042f178907116c3963b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-rigel-bootstrap-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bc5104c5c7e429d0d8c1f83f94dc9e0d96b43745df34a274ff9d81becdd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-karma-husky-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a69334d647671f1af8c79bb136cdaabb44c4e0550f970d450d235b73e63fb0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-canopus-deneb-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47d8400095d678d2c3e3a68ff75d19cd50df496f04eecbbf4ebf7d8b3de8d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-betelgeuse-restart-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c17901f24ac1ba7bfdb27270525d255471ed4fa9d15e0baad834e186d971a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-eclipse-deneb-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669350bcf59eb37c221ae4778203358027c54bfef1008f0df4c38b211cf9331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-css-loader-callisto-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e15db063ad96961c26caa1aa5ee053211e5e9c88abed26b2e9f9f82a5714bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141389 Malicious code in cygnus-zenobia-castor-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6fc83f9a9066367039fde3091f84f2dddbde9e9b230041941f6f04b3d02dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148055 Malicious code in socketio-less-pino-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5142e8f25eb8cb84522138e3c98a5822cfca19eed6ff6a0b8f0608fa00c1687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149545 Malicious code in wolf-cross-env-markdown-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92b6b8c6a2644f72700eeb3abdadd149b76826d296338e032bf88f95a1e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141929 Malicious code in electron-rigel-bootstrap-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bc5104c5c7e429d0d8c1f83f94dc9e0d96b43745df34a274ff9d81becdd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148635 Malicious code in tethys-standard-miranda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d3c30a51abc91b12f482bb8456a6a71fc95345ed667f032cfef13cf02b6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146337 Malicious code in polaris-epimetheus-chariklo-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbe848b613b149556fc1e2da071bd0f0b9920973ce442185806e397d958f406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144485 Malicious code in local-css-loader-ursa-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d53f49874e4864e74dfa98d9d5a9d4aab907c412463f74c6247ac80cd5a0c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139507 Malicious code in apollo-elara-dotenv-parse-variables-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d6ffb3a5fcc8af7f3f9a0d30af619a0d4d752d0e675b67c66bc3f2ac3cd6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148969 Malicious code in uninstall-sass-loader-pegasus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91affc7f9bb256fde82c4268b20d43912ffe30773a0fae9ed34039f4e000131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145589 Malicious code in nodemon-odin-yildun-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93fc9caed39a985ca16d0832f3a06d17ba8a9921edbc0485d93b77f665db149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144296 Malicious code in leda-style-loader-pyxis-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec0232e4a46f48d132b5c24d990bc8257f4d2882219fe80a1de80736883a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...