Malicious code in titan-quantum-unuk-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2442a3f0060056ceb4fb323c6c2eba78b7c4abb16e5826b0c5a13a0f9bd413da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141523 Malicious code in delphinus-leda-polaris-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6c18328bd4bdbf2c3bc3fc6cd547b636261ffdd43a67ce494a8b2953a26355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-pavo-arcturus-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb3646c653052b4f7657c65572c429be051821f24a9fb82a8bc96c3fff2cd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148250 Malicious code in standard-bootstrap-restart-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d44fef6ebb0b24d6d2f1ebf6c0af401ad84e3fad782b5e15cb6dd526dc9cfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146878 Malicious code in pyxis-helmet-dagda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3261cb1f33e1f0746cada1e1ec1fd231ff24c1002066248b2efe40915d70ff48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146192 Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-less-loader-middleware-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae569a3671d9274588de48ed5de8d667d2f2d636d898cc6832f261b42ef93686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-neptune-fetch-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb24c5d3b535a0b5cce2ce3b89a0d36c4c30e0fdd5322f5b0ca38d84d577bbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139660 Malicious code in atlas-terser-uglify-js-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bca524c147bbb2c84bb99e0bf53400154dfe38d61b8b5fe6311f40c3c42645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140265 Malicious code in cache-centauri-cz-conventional-changelog-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a92689d8d98e715e231fb794099931611e1145398c0c800e2a085a77337001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-apex-react-bootstrap-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1970fde9afcf4aed637d9a4801d60378c96b21ba6bd3eaa788e07cea42a98164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-sails-jekyll-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19940a1065baf15cee8db0d01a56f9abc980f3d4d7673e36aa7d1e8a696b1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-perseus-version-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0bd145a99ea5128f5d6470882e3e2efddd123e1742a090cbad1d83b53255df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-spectron-webdriver-eleventy-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec619935d35e4a3d334b2616072fd89471bf96a9e8e31ae0c9e47d03ee1b0580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141869 Malicious code in elara-centauri-ini-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f1ab2a055433d5ee1d938079bf058d314bb9f51c2e41c1167b8fe11d06fdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-sequelize-mensa-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0ff8cbb44b5e6aef3b12f19a391df695716e76d68aebf347771f7ae51fb08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-passport-sqlite-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5532993780f2898962fe1e2cde7c26611b691c63cdfb4725106159dde5a99bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-server-miranda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-comet-miranda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a504071551534b2eab18488bb8ea664072183edf0e457860d5eae61d4633ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...