Malicious code in mocha-hercules-auth0-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0a8d0cd21f821220e7b075d93263b825737c0f630c3efd8dc80a94ba767298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145785 Malicious code in octans-venus-fetch-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7185ffd095e4f4b31889ffa376123541f96ad34c8939f74a4f4ab17f5905aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141826 Malicious code in dynamo-express-quito-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1490d923716f91683e1e1336297f9c34d2a2418731c1d1116174716d05c11cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140908 Malicious code in command-io-gravity-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85d428b46a5347f6003a5b341f4bdacf76a07ecde08559de977319a4130e910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146920 Malicious code in quark-capella-canopus-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4536fcb69a0fe5307fda036394faf6d0557525327bea93c51233687e630a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149433 Malicious code in weywot-callback-native-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf6401f2882339b208ef56c16338a6c47a298491ac9626bfcaf7d028652236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141816 Malicious code in duplex-octans-proxima-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b3bf319b92e4a0abaaa40adf046cf088a33ab1547bfe298f363a01dbf049a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139252 Malicious code in airbnb-colors-sync-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc7d0428c018b9d34e73281aa3acd0df3ba2771cef2f568249f03b9b919a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145439 Malicious code in nightmare-janus-europa-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103b72686f6c75739969098184b39eab91f66b52806609e70c348daa79d310cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144248 Malicious code in lacerta-mutation-lyra-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1a8778a9919d1bf804f1ffc224052d3b82fa960b4e13abb3c34bc2b1c21a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148039 Malicious code in soap-vega-hydra-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe645bba34b0e4e8d58c3cecb6d63b49c6452156e804d022ec335a18e9eac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140178 Malicious code in buffer-virgo-eslint-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9404d1108d6ebae69e8398bde30e94e093d70c651f9acbb8f4610383a52ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145346 Malicious code in nebula-mdx-polaris-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597abbb8f843368a4693e7ff646c15e6d201318b0ac904a36d5fd327456cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145019 Malicious code in miranda-ariel-metalsmith-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edfbaf3006b6027e406e19e8a4d6215add69e23c09a4540decae8c630303be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144800 Malicious code in meissa-cordelia-ursa-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145333 Malicious code in nconf-winston-rigel-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57818656989f84e68d0cd7543eb5cd75f822505d7833f4de2347d782cea86674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-frontend-changelog-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c250a136f5d0990b830b851b42d887b841167f96ed2d9628e6dc86facc74ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-aquarius-process-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14139bddd24459169648f8f3d37c8b2a66cb08078a77f77089202a378f7d15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-nashira-jwt-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bf18553cd953f1d19f22d31127076ebf2b653282b3fed5448e26827af1d5e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146560 Malicious code in process-nashira-alphard-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d892e0621ffd010621c749e7224836ac446d06f96c997e37d0d3e3eb69033e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...