Malicious code in europa-nodemon-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040fe8e1b7926316bb4dab27f0e6ee38410e1212edb9c6c692d70ace99f643d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-magellan-izar-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37932fd636f353019a58a2c6e296f2f2032b7ce7a5382beb3b4f835090c776f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-norma-cygnus-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3caa6e4c2e2507da0368799cf63920ebb608711b7a6709e9862ebb27c11a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-cosmiconfig-impulse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aedde5124299a67704ac06f0b0969657a4ac78522a0130621fa3344d627407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146177 Malicious code in phoebe-run-script-subscription-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a604f7fb124cdd8e74eb6b0e986431083a906c7810ee45b6d634eeb87839cba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144428 Malicious code in link-umbra-spectron-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536e47fdfce250fe64bd38d1a246f1fe8af603ae7131fd0af3df43f6ca78d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142842 Malicious code in gatsby-exec-foundation-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aaa4659fe961e104e5a69e278baf5b0518eb53c8882b3de7b2bee0c88b2e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149693 Malicious code in xenos-vuepress-socketio-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af27987550325036154caf57f1fc9d78ada800fca1583cb0f744df1f9a6f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141594 Malicious code in despina-event-callback-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa08c7aaf16d25aa420328b07091ea210ece73d5803dbcbc6bf3b511ead2f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149033 Malicious code in upgrade-spawn-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140488 Malicious code in castor-markdownlint-semantic-ui-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55243df6cf5da78f44239d0393b545ff1f217d0bae570f37a760ea7516868f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146125 Malicious code in perseus-yakutsk-frontend-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a641fbc17006d8fdb7b548a76d3ebf7bfb0f5cc7aafc94582bd05a5f53074e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144901 Malicious code in meteor-canopus-upgrade-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d09d00e0176b7649356089a99de32bd8bcc56b1f20e12d4d752e062c992a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148664 Malicious code in thuban-run-script-callback-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140386 Malicious code in capella-duplex-upgrade-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea0537e1d4f6441625d140f225246350b2f419c999df9095d0aa0b6fdd48e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144385 Malicious code in library-prettier-stylelint-semantic-release-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048a235ece038bdbb37f29922f586e5674b5501de5239c0a7b67a15de6fa8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146173 Malicious code in phoebe-publish-gemini-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c346999cc24172ed14d568998d9240bf3ca1888626c6c643f1881bc8aba87b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144213 Malicious code in kronos-apollo-changelog-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79df635064750b12fad3f8cd2dad32e8df6e3422782ac162ad599d7e8a5a5c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...