Malicious code in betelgeuse-mongodb-command-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98ef2c255a17ebbc778012be0f17153c4e129d9658af352e7596673b793b339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-puppeteer-gacrux-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5322f7020a1f3604bfa09530366724aeb5e0f81e7f891d16090afe79b93494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-bunyan-enif-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06a55e35f96e0c5b70aa4803511e0cedc06c658e67bbdce9472436f46a8534a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-supervisor-dotenv-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2714d08ed8aff240d888fd65a138d36e56492e01ad10970dd01de5664bd97de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-apollo-electron-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe39e89de31f7572fa428b1efd187a7398bbdd7de3486c281d2ee346ff56fd36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-prompts-carpo-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5413c392d0af66c79d7c528d110435cb3eb0fe6654c98bc40e325968417e3fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-run-script-html-webpack-plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-development-virgo-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-nuxtjs-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc38e25ae939a2a042c8cf5c3865a6e8479f2d74f275f30ffd53c4bdbedcb729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-geckodriver-alphard-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424af51b3129b7f488560fc79efa78acbfe2a6acedce4e79dde2a31d03191a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-resolvers-alphard-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d9bd3a391bab4e4ca35d2acdd9cfcf21f89ccc6fb00de7a1ea2767b1ec6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-nestjs-loopback-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf610150045073ae0d0481664a90fa69a332cc012f749af053d58550e00feaef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-phoebe-install-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca69426eff1d249ca3c975a14bab407ffd9be509f4fc2b5a44e0fe44204d5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145866 Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145223 Malicious code in mutation-gacrux-axios-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139294 Malicious code in algol-dione-markdown-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85222759ae1d90c0ef7fd9b7ceaef96a1b0046b114316d86b790483370a812de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144582 Malicious code in luna-sass-loader-centaurus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2278034b7ff68a8192cf1094d25a5a2c99ad341cce263a582564d4c2ef488cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146584 Malicious code in procyon-commitlint-resolvers-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048db8edd78325c3e90ce4b067c733d39e621c74207f2eb16db312b39e5e4150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...