Malicious code in sagitta-superagent-non-blocking-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8ddc615a56e7e150a01de9f37fb83d259b5816386456335a484c9eaeb10f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-command-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f12398e16b7a7d7fe6846b979eedd67f002e985d6831deffbd3e08f3b1f94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-dependencies-geckodriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801176c7498c86258fc33864d1d1a0405d7ba7062ec8bb2514017ee4e04b7f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-less-janus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9d6033619dd075c66d22a2b5e6f8dff5062b06e279df511f1244751d71c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-antares-react-bootstrap-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cba04a759870f861ae77433b3e92b040853659b2a6f06f8e8d118c3e476f9e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-await-commitlint-config-angular-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca5ab4510a606274ae8a004323b0e1abe851ab2bd6248263f9b5647d2de6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139548 Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140937 Malicious code in commitizen-nestjs-got-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e835108c3ff59b6b19178f7c724ead49f3fc9b48f2b2727d02ab9a461285cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141746 Malicious code in dotenv-safe-cluster-hermes-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642179dab6a87ab73e87dc7d26ed29caff0131a2a0adc7ebefb9c029fef279a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139626 Malicious code in async-hugo-yaml-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c0e1b1c15e19a880c6cb5a4a289493b09db9ef6d668639e8e3419b0c1d2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146778 Malicious code in publish-child-process-fornax-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9206d1e6935ea6d29b7eaa1a3f55a42a0d274bb520f882db4708822e9a39725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143354 Malicious code in hexo-spectron-webdriver-odin-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3a63a8df79c8649d7f26ca43147682855e88d1324dbac739a1330840977e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145966 Malicious code in parcel-mui-event-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3a8fdcd7a231752e40c7d558b2efeafc603d9ec4bee1ff23f8c5ec2d88e5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149764 Malicious code in yakutsk-cordelia-toml-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943710f30a4283bbf27db59d186c909451c41749bbd9d27af4549f88a5bb556c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143825 Malicious code in janus-ora-odin-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b1a4c7e5407ea07e12997e513d73dbbb0613592dd22ec25417ed91ee6bc5ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142700 Malicious code in frontend-carpo-yaml-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cc2702bf536ac942f0062c5a6c776da5fc9a135b93382df362258e62dbb975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143254 Malicious code in helmet-miranda-halley-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89d6ca7cce0fd80ab186246ce104178ed46869da529802ed81183e32b0ab323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142818 Malicious code in ganymede-regulus-nova-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfcac39e2252d7a98dfd7aba9713cfe91f64f7993e4b430534ff58eade376655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...