Malicious code in pegasus-impulse-grus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6509545da991311d3beee8db0afc074abdfa583a2df12ad31f8434c955243b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-mysql-eslint-config-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e723bdfeb0ecf0f7b823a7630a67f5018f37e2669440510b547ed98b4e60b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-prompts-meissa-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7444d1efb910638a58715c22822c78fba1ee61e841b95a0f0f846fd5a6529fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-mira-cypress-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff288bd799235397c87385876fbab2931d12fc07d382d64b5053e7de4fba340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-gacrux-geckodriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12e7d14ddf41e29e1fb8ff69e185df8b7dde2a9990716da9dd7599617f6cced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-bulma-tethys-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8e67c18daeeacbb5f975e2833c77be01cc75cd8706f8f443d850d65db26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-comet-orbit-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40bed052f835a132acb6491032b7a18c1036da21b1b9eab884258bd3b3c53175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141105 Malicious code in cordelia-node-sass-titan-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aba470b153d913a8363811c0bdbc4300aa4833b9a41af28b0d7a3c678ac301e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142382 Malicious code in express-markdownlint-koa-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5af99872602a5f7cbd6edad3d03e0270313304601d1cdf9cb87cd3089c9e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139297 Malicious code in algol-levels-socketio-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24842ddc29a72af81de475accacf34548de3619c4b5baed519de7e27f5778307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143679 Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149767 Malicious code in yakutsk-electron-request-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e539cb02c91ae228f455572ac5991dd7b11d2b868b70f0070586ea8fd26a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143077 Malicious code in grunt-stream-rest-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738247151f180588c56546db685b85a7ed478e77a9961371b2a46f8c2610da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147038 Malicious code in rate-limiter-google-halley-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4386b673d0345f9098810f5fc8d9358c549432be9c1f07dc0a24c3c44911e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147300 Malicious code in request-loglevel-webdriver-mocha-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fa227c4b682e4efbbf01ad0a3de65c3e135e1af06ba4b2149f3f53c6bfd3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141834 Malicious code in dynamo-parcel-helios-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca8b68bffe089827b1bb978a267e2a3fa9a7fa61f0fd932bb4bee41b458a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140056 Malicious code in blitz-pm2-mutation-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9947d7d777aa5109d31e05196cc3ee49ee24d523164a0c11029270bcfcfb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149584 Malicious code in writable-xo-zenobia-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb79cb573188c5f1c88906173ef040f515a4e0f8c4124c224f975bc85f7e44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...