Malicious code in publish-writable-remark-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec46f6e0858346720b7801097d9bd08d98ef8206557f600b699449748cfdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-luna-virgo-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed589edf36840133055bfb1e095af0bdd998b0b2e7ce9a5195220833baaef38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-blaze-europa-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187e3df5f25fa89e7d582ad2b49cb8dd54a88d1dc8b42e7694934d80e7d5b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-mira-miranda-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae3b2a2d7def80718c44f599b95940a36f80043b02149736f2a0a1fad477fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-neptune-eslint-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316f40d1181bbc88d6fd5a4bc2b3e388a06ff7b6a6a4273a4ade19256b96040d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-corvus-proxima-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811b28197d36ff15b0b3d34580e11b3c4b00810b291206222cb8d2fe300d2f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-csrf-javascript-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b158ecf3d5415472585bcd086696d2ca6e9cb147c39377fb297a2e20d6a871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-celeste-prettier-plugin-markdown-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0b93c3ef015e6aa400f4106766563254f0e2fc58bd1dff4a01ee9921e39aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-callback-redis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc902eedfefad70cb1e53bff07d347343986663b7e4cf05ee0bedb6d0f578343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-centauri-enif-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a679174385d73c39620a1a37cbb39b69e452416d7479c489f935ba04496cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-commitlint-config-angular-ophiuchus-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3224b81b0368b1a9c8062355759b2499f2e030d243d5f932f91eced78b7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147802 Malicious code in selenium-cypress-izar-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b3cabd7f11f9dfa17efb7e42f9c91371cf54fbb439240bceb7dfa0e57fe170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149062 Malicious code in ursa-loopback-start-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b25c5a49bd65dbc94fc59c560e21bfdcc8bd4f0963dc090dff5f430428d54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144270 Malicious code in leda-farout-alphard-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de067a656c1a4c8562342873535d10d54d00d09ca79a49547628a67bded58c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148756 Malicious code in tool-terser-avior-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e7250d997601bf9650f92fb361f0b19215ebb038518c5ff63a958a9eb4dca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139724 Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141863 Malicious code in elara-backend-mira-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28bbbf6df8e21e431ece8617093f35458c5b6baa68563b1514c57a029b5a6a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147863 Malicious code in sequelize-convict-wasat-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8a371ffec811bbe299709921e05c8eb65ef5d526eb298988dbcbb38588651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143188 Malicious code in hapi-lyra-europa-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f82c330c425d4821d5ebf44a02c1d02a32ed95f93e53592b907f5104a831de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140638 Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...