Malicious code in farout-dotenv-parse-variables-umbriel-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77da3ed7725426c466baebf68e9a01db08eaeee9aca690bb9e995b81ac270724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-upgrade-spica-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ed6f3c60cb602dd42909563e4d53ff2103fab5f610611b4fabfddc2e51955b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-resolvers-cli-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010e7aa179a021023ded32a1531ca34e4cd286c20d4e8b50aca8afa148a3ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-europa-antares-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47da6a64a6a0952ceae89b41a52613eafa5aa8d8d0d973dbdffd14faf9b588b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140381 Malicious code in capella-changelog-cressida-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149775 Malicious code in yakutsk-polaris-dotenv-safe-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57e19ab1937184b42b470fef639f3354a1f7f637d15d6acba77b90c665a4194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141985 Malicious code in element-ui-venus-avior-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeac183e6d94545c4266cef223f857dba6ee25ed0cafd0536c4a56a2021212f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-loglevel-stop-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-aurora-webdriverio-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd116482f862d5f3ab2080afc8cfbcff98844d056b64d8956827a57d4d93b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-dorado-firebase-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7276ae4398ea01b17180f7849c7f228687aba2521a6ed7f054c58b4e9383d739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-configstore-venus-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347eaa62a2c6352a4b45d8e3f3a6634c1126a184e8ecde236b3712f87f73c0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-phoenix-dependencies-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5017ce43682b298fbc06a8e5154a434e96fd9d7c7ef63c90c7dccb722695019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145446 Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142553 Malicious code in fomalhaut-spinner-capella-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0e8d1ddde0788381e96ddabfe8341e2ff22da6843eb0046ffd53de5dbc0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-server-jekyll-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae00849917075b7ff0a50029a91669d6550d116557fba279eb8d538fbe4ef6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-atlas-ophiuchus-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cf5a6cfe972b72ebb9d35d0e9dca13f2661913f52206351634dd057bebb6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-miranda-iota-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb652e8edd6e45f3edc03a5a3cdc6e3175c55ad095fa5a223aaf9e27be71c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-polaris-husky-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7098c4c1b22a10dd90a1bb7df8545761ba7543d1ef11f03e4ac41c00f39e2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-prompts-venus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099ff1eaceb6ff93a26f3e4896f3492526122cbb96d49d532a67135b00209a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143922 Malicious code in jest-epimetheus-kinetic-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddab619c8b30e6580d6e76848db0f867c37c639ed8a74cb0e28c233e735ad4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...