Malicious code in toml-commitizen-vega-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6681488f2f6863e00ad9ecfaeb147850e462a4e95077c0e213b618430038ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-pegasus-perseus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671af7da2ae010d3996821b6cebc6aeeebef5043d6a5c62b3fe0d51ba287aa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-avior-enceladus-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce1c47ba5445dda49daeca42e550f04bec27ff0a7d15fef9aba199e2ed0641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-odin-registry-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eddd33c9381e7922614632b9aefeba8762c030dff0d88ac0c3d0480b7b7506e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-fomalhaut-protractor-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd11327901ff2b5080328d85f1d8ef235277cd984bf86799e95dadde492694f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-readable-dactyl-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3fe8fba115d5787ca57c1183f16a661fb0dd62f372ba2f47737309bd8cd39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142154 Malicious code in eridanus-registry-nightmare-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e598b5c68b81db1caac8bc9f7943296272cf21fefb75a73711750c94cb94c330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141558 Malicious code in deneb-scorpius-style-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3241b3a8b5f7a423b90c3eee199d223a222af6d8e90cbf1d0784b08ac4bb7ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140647 Malicious code in chalk-loglevel-io-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead7d669a16636bce25e9661811f5f47280b40ab64ea3c1e3cc047c9667dd643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143735 Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148991 Malicious code in update-blitz-karma-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbaebc82b8eaa16346846eed91be01bee36af4c22c983431ab8165b6d70592eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141031 Malicious code in config-lyra-solis-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93918839bfb75a9a119aa6c35c5cdf81d305773332ba2da44822c50953cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142533 Malicious code in flare-pm2-capella-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146443 Malicious code in postgres-perseus-karma-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f288c94e32bf86ae62d6ac0218540fd838ccf835460b8f2838c379cd6e00b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148813 Malicious code in triton-dotenv-safe-typeorm-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6431d75faece89bdf15b8f09d6765e8eb9c3f95eeb2c4b6c1a76c4d26dd91391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149548 Malicious code in wolf-enceladus-telesto-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84a7209ca76d3f75e1441dfa06b102101ecf201a5d0202b27c3ce4d1f243a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144426 Malicious code in link-stream-global-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140042 Malicious code in blitz-dotenv-safe-chai-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a02bf129c422cf91f95f6f735927b5be16e5aa0a264e7b197ce7558b296472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146909 Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143433 Malicious code in husky-xml-kastra-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9c2bf1b1dde395f39bfb95800a0f14b8fd95f06ea2bbcea41cf3fddbcc839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...