Malicious code in nightwatch-aldebaran-centaurus-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848c05467d4a74d0a113c3fa27e3891f6fe22ecb24978863656a14c2c6810b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-ini-helios-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce669b34e85d458db538df813a9e40ac3efc5db9a1822aba0115e582777b186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-event-winston-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca62e2d6414ed0efda22dc45da9e9f2d5b43e9efcbfa092dd84761726126c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-zenobia-event-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be99bb8e5ef3ca11055825b864a1c017ac103c80f70668e065b8bbb94a43ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-native-superagent-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9399d903b38766a58790ac43991a2e3704dcf083ce309f85ffdf08a9046286c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-hermes-xerxes-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb79ac3641111993364fd68a5541c4fc3e81faf66fb042b2aa4791d8a1db7eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-passport-sqlite-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5532993780f2898962fe1e2cde7c26611b691c63cdfb4725106159dde5a99bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-hyperion-process-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf4d6966d2840923341cdba9ee04e56a003d53e675e76dfb1440a4e1b2c0800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-changelog-slides-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c1e032d0ea97654da29e16043fd146101a608beb21f7b3ac344026965acdfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-tool-fornax-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc452a16821f632b60df56036af5151063884ee1b108f2aa9dafd78573f9d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139637 Malicious code in async-sedna-prompts-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb88c2f8971fe4760ed74b9feeaace97081beccb982086fb14a92bb504a614c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-envconfig-equinox-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d82cf644f75bfb47cbabc64615e3caa508d9bc4d7f83845a2ff472647ab4fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142593 Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0734bb69f5bd5eb2cc01b53a18e846470e1f8216511dc303c4d66f96faa7c1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141523 Malicious code in delphinus-leda-polaris-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6c18328bd4bdbf2c3bc3fc6cd547b636261ffdd43a67ce494a8b2953a26355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146560 Malicious code in process-nashira-alphard-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d892e0621ffd010621c749e7224836ac446d06f96c997e37d0d3e3eb69033e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143725 Malicious code in iota-fomalhaut-less-loader-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0ec46f8e20a1a9d4098250978e555733b981be3fecc9e2382809291a2de13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145059 Malicious code in miranda-stream-node-config-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10f00153d17388eda7368ddb1063159fba592d0095acd6f9565936c4911657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146878 Malicious code in pyxis-helmet-dagda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3261cb1f33e1f0746cada1e1ec1fd231ff24c1002066248b2efe40915d70ff48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140223 Malicious code in bulma-package-karma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eed95e027be6b3d93e60a805a8b140da2fefc31d366385a1db9dce3da622d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139569 Malicious code in arcturus-fork-cassini-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5034f07878345120b3e58d57a392ead084af6eb7f29ec57084ae84861f00c8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...