Malicious code in hercules-shelljs-xerxes-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa8de715e5b1534b7322f06bf1f7d591feb8f069c023490ff6e1d16a652a70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-commitizen-koa-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9be3e0b6abd33eb7a29bfccc6faa0d3513fe2ed7adcb7007ae82d65c971681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145691 Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141483 Malicious code in dagda-repository-postcss-loader-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b212ae5f985d7c18d311a6ab321a2d2732144636d494c2f7fc71552707ecbcc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148585 Malicious code in test-umbriel-morgan-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7e38a95ac3fab8b1f25744bf8b720b6a5394219e6eba2b3e7a7456205abd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149436 Malicious code in weywot-duplex-meissa-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c2f5605f67397ee5dbe46e63f07211ac8cccf32c5834fb4218299cc9736f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141033 Malicious code in config-meteor-start-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f41c156800172217496004b04bf2c1dfd2ae71f2073b0ed785b6ed6984b299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139436 Malicious code in antares-rocket-server-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202c25aad9abfdbe4f7b790c02ab365ed6126e7de8229a8157f48c9eec9b4dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148179 Malicious code in spica-slidev-ultra-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147869 Malicious code in sequelize-gravity-jasmine-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228f87b36c2904f348256f3417d1250c227305fbac8fe4a7e906258214771d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139816 Malicious code in await-xanadu-jupiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2f1c79ed3156189c294271f1e96c1d453e72ef5d6750d32043e80fb3f9a866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142659 Malicious code in fornax-uninstall-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d813f7d77d1e40e349270d27bb8fd5e7bfd218b0b61439723e65f93a8cba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149131 Malicious code in version-bootstrap-query-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c714f8e5e8a905a8cf9dbc194b375cda3d1617f651317d938dc36dbf8dd250a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149678 Malicious code in xenos-gridsome-quito-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb64db054ad50159c2aa8b92655c222fcae4a6789e512b97c9f29c9f9bffdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149377 Malicious code in webdriverio-miranda-atlas-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b871897d8a5677672d07dadfea9ac627453eb33e2885050a1e42fe3e5aff7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149831 Malicious code in yonder-apollo-ophiuchus-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ff70c563ede2b3fc94cde3fa8f010d80a9e52337867ac9a8c2b2a2e78ce96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142059 Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148639 Malicious code in thuban-acamar-geckodriver-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2efe942c0be1e5d266bb42a397eec4438ab5d17f13940591bdfcc69cc152a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139673 Malicious code in auriga-babel-ceres-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28d45d234dcd5dce8347016dad2d69193815a03f58182ce50419b00a8c02ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146117 Malicious code in perseus-spectron-dione-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e15fab69ae105e30fba7e3a24c1bc57c283d108f92197936c36532b038d9c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...