Malicious code in node-config-aquarius-selenium-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e5c2af9e703d23e07f831f6ce27c38ee3fc7977eb88fccce182c8f6d1b82b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-kinetic-halley-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274a41db0eed5d4a117b9c311d74680cad370fa7450d02ee18f04633332d3572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-virgo-global-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026e5004027c23baf1096ee291d7d46f58a34bf01ab59e3bb83f497be54a0955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-quark-rimraf-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51cd66b65d2db1213f39eea53dd4603c5e7caac88c57ee60eaa8cc09dc337c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-publish-helios-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b592e15a5d37c0cbaf384d4b59bc09831c02766fcac6afff08998bc65f344ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-altair-markdownlint-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-wasat-kronos-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d110ed903961a6950cf5de4019f0f337122fadc51bed27728ef56e34211a329b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e80ef22620456b87134e65d7274869649deef01e92932db075a10cbb52bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-kronos-sails-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e7f6c449585bbf20e538516ed1eaa838c922df2fa2da21a0f4b08d049d43e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-rate-limiter-sagitta-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e103233460522c7309a14483bace6fde42720b89098c9209f4e77d9a5d28da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-hyperion-restart-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6aaae7ba05ecd5180e3aa5e75ef327ebe32706e4508f8ab08347dda81943447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-hyperion-chromedriver-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f0cb38df1a8181ec17f4e0a0c4f4e5d50074dc19faf9a14da0603b416ba956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-chariklo-odin-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c2d50e67cbc5f2bb004a64214b90e5ef969a05f10b98fa932df4236c8f8ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-hydra-weywot-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f121b1962f33f6f178f0b9f8dc9bee590afdb80f5fcc6e4a087f70a9f74232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143502 Malicious code in hyperion-wezen-gatsby-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a5dacd1d551aa631da21bee30bcfa94538b09ab68a48ce915dbd65fad3a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148133 Malicious code in spectron-webdriver-init-wasat-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8431aae3cf4bfc929aa82d1fa1c88264a12e7a751e455259a574cc0e9a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147923 Malicious code in shelljs-nightmare-perseus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddeb1bc1a009697c0a34a92327586e0fafa7ac89a758b39af0e3d7cfccb123b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149558 Malicious code in wolf-pm2-nightmare-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8439e7b0224db89fa9f40bffec37ff29001a3cf946650a27e3eb804f62c15ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140733 Malicious code in charon-semantic-release-nashira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1789d099d0d6d3fe818d8cd16de7c18e8f8e48875e2d04a981153d07e84bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...