Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-enceladus-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f303dc4fc3654d2483f1bdbe2bbcd9922173b5307487abd9154297d5ce82c078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-eleventy-venus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2496a63bee7beb3167c28e31284ebf45ceda5dc2fe54d573431cd05f1daf2bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913af6b808b2592fd435ba6659a92acd757d2e960ba9668aae34518b74dc98bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-middleware-non-blocking-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0911c18dba18f41ddc05e9ca6f4eb53d1a1290db69de8d120a48d8b7b16b0d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-hapi-buffer-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daaa6f3120d4666fb5bf52550f2bea95213da7f8afc741f1360119204f1bfdeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-eslint-semantic-ui-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0f9a98498be315aa619608d786350a8e498f80693205f92a211b1ce4ca3f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139426 Malicious code in antares-nuxtjs-xanadu-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f174f64eaf238a88acf650289df7e20113ffb2c14d336a40eefe4f53d6f3d4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146765 Malicious code in public-passport-event-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf8003ea6e13f7738d4e65e37de9cd73ca9fb6ca0cc7bb83f4a2ba932a3f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146223 Malicious code in pino-meissa-izar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f4f35d77fd9a52a0e902f6c0cc3434a805974cf10624cc7cd084a5eecaf839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142722 Malicious code in fusion-arcturus-uglify-js-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcdbbe7e76603a0b829939b4894b608d87f4f1f8ec3bf93f24904bbd379212e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146489 Malicious code in prettier-plugin-markdown-nashira-vega-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d6f3c74a6835db2836c93f81166e871a28ac1ffce6ebd2fe4ec78ce526c638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-procyon-comet-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcab1159cf76926c18c79e2f1c43d83439f8a65de204c132c99d1e6708726f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-fomalhaut-node-config-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490bf6813567ac10a53b55d8076e06b00264ecb8cb1e85e276c8576f7508bc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145186 Malicious code in morgan-regulus-xenon-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88c30f23ade6e1415484a7e9c1f68a5da86de1d452c1653f5cba3405c60358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144417 Malicious code in link-ora-gatsby-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2cbba5177f393474a7266a1fbf0f8ee23ba7cb420d9d2f5792a280484e1655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142251 Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139914 Malicious code in barnard-neptune-celeste-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147233 Malicious code in release-it-quark-antd-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86314711951e058560cda1b445646d8c02da1a3a08066a8e8f749f38c1c95e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...