Malicious code in config-meteor-start-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f41c156800172217496004b04bf2c1dfd2ae71f2073b0ed785b6ed6984b299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144971 Malicious code in mini-css-extract-plugin-cli-quasar-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fab84b007bf18d2be53f34e9459eef3ed9c6f3df11ecedfddf8cb18bb4da19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143292 Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e418f0bc559469130812cf69c9e779b415806d81ade924d7975a5e386c1340a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149518 Malicious code in winston-ophiuchus-native-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936180fb7f70ca447bdaa3801548797677e77685b3a6bc1e6ae6806bb2207fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146072 Malicious code in perseus-cassini-pm2-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eecf795ed972026476c3d217f8d763e7e2c89ff111b2dcd751985e8ac5aef90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145001 Malicious code in mira-andromeda-csrf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205dbb23936230601580aec44ec7ecae172b933acc677bca41f2c589c796f577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146739 Malicious code in proxima-sirius-sirius-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b141ae41b6f4e29535c0acaa3fc6a2ee6123053d855ff572721b1822a26452be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142464 Malicious code in figures-delphinus-ganymede-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7df939af27356d97f9a5ec3f6ee7e607f3e002848db3d2eef83a06a41ac34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144354 Malicious code in levels-got-react-bootstrap-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5363bd2c5ca34ed6da0f38e5ce8bfd01cc4b3432a01f7c875401e1d2f2289dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143684 Malicious code in install-sagitta-forever-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5266316882adf444b57e1705002258aa5f6cd64e504264dbcb91c1ad0ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141208 Malicious code in cosmos-jsonp-sequelize-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00a5abfabe04224fb65871927d49042ca24e04932ace2d1531b09a6386ee04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144660 Malicious code in magellan-rocket-chariklo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e00035575eab423ae3e4685949b497d9cc3dff7e8691dc1a9cb608ab0565d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141494 Malicious code in deimos-gravity-cache-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622702e688f2fb8e40276dc4b844a58c5ad13b3b4ca30106511cad457fa7130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140104 Malicious code in bootstrap-fornax-test-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6adf60ba9bef1c75805ea586f8259b5b5ddb53f5837ecb17beec187d724952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143897 Malicious code in javascript-zenobia-procyon-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d17c7d8410a616312651adc3f3ef897cab68befc9d997b41d73c3f98dc7fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139929 Malicious code in bellatrix-chai-deneb-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9fb6478dd3638f00e16753a5839c017c4696e62a8cb64c5dbf9b7518f59cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147935 Malicious code in sirius-antares-quito-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb14f1e0ab037152d92b6e9a004a7710057e78b13dea45ab58a2b501256a79aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148792 Malicious code in transport-lynx-transform-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f627df8c289e0b003c1cc35af435b79b568976165f0a92a17edf2c0d94adb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143513 Malicious code in ignite-foundation-cluster-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb52fbce56457da73b244aa99a6b150c5cb9e86f5e67a9c67669735cc5e26b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...