Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-query-solis-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5301daf1daa78d604ee8ba02569eb891ebb10eea2b07d08eccbcaeac24c949a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-jupiter-prompts-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76f5ff174315c9b4ec3a265e122cf8e22e1c0b6891896257cb53e5174d4e62a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-module-polaris-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292b22a04e5c06ed11440c18bc5d5e0de585f99420c30f90f179b1222075e8ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-jupiter-yildun-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b701429c95e4cc5ad557d1dbf0dd0087caccff3567a9b6165ac828df8fca6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-wasat-frontend-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1e87b3b20c2fe6fcc2a57079c6652db190328cca043eca984aa1659c223725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-postcss-blaze-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe39a7cef3ae91cd4ffa32b68b2ea1da82fe1d85208c54d7c589fbdfbf0b44d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139763 Malicious code in avior-commitlint-config-angular-cypress-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27fabc8b6619c335527c49d2b8fcb85fddd7995173052888ec6ff565c9fedff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143034 Malicious code in gridsome-barnard-express-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cd748aa1b25e39fe6b6bc97cc6b2c88f522072dd2fe72c0de2ed22d74d7acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141875 Malicious code in elara-fornax-pegasus-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e40397d6cb0a62aefbbc39af3c9a1df77c5115ecebbad123ef705f0fcadaa15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142886 Malicious code in geckodriver-uninstall-husky-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2b7f6230965f27a6954f78531a9e677cb5f7407f313086cab21ff0979a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144063 Malicious code in jupiter-socketio-sadr-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0dbfcdfca1284262af08ff3db36827f6d908d7e92e082ec435a619c320f5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148254 Malicious code in standard-eslint-plugin-mutation-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480790047255d5eacfffe50b3ebe2488ebafeea3734d7906fded36546b7ed765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147312 Malicious code in request-server-ariel-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab9456315197599ddcea0392f87eea221db5072caa463e66a4a04e562bad81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145787 Malicious code in odin-altair-ganymede-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d673e550ef24dded27e21a26ab4bc7711e16dcc672c74e4f3ab27c334cddccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-private-triton-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6a9a1c5dcde551eb14e7da9977fb75ff1dc416e1129cc4554098611f50076a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-antares-development-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159246d8d4207be330eef63c7841b4101f0e806190d6bc45b2344c63e20bfeb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147443 Malicious code in rimraf-arcturus-callback-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890f7f9988476115c2e1293536fac082ba9be0e4d850efd3daaa4afa7d8bae28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147462 Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143313 Malicious code in hermes-css-minimizer-webpack-plugin-local-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2c81158c907717901718ca894e86e52cd0ff7bb06409578ce68b8cd5a40ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...