Malicious code in non-blocking-xml-procyon-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0a264027b7585c64463a147d401953cef73809abb5f32ecf3d768ab2c538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-metalsmith-tethys-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2939cf6902ba5bd84f266f2225f8aa18ebe1d645040c874de885d8642b4252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-hapi-sedna-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0107af5047f084df1b7645be00f9c88d6e13ddb8f1341be30341e5f308e363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-perseus-auth-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894d2711a72c13a2cedb18d34f26910a1cc35c9265593150bcf55b7da4d90e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-iota-fork-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2e6dbb25e8df909f2e8745754a5e1c6dd9726eac927c26461505360a78dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143171 Malicious code in halley-vulcan-nightwatch-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba8459812b58b3adb0a734a6bc6f6acbcea1e099036c9801ce7b9bc035bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144081 Malicious code in jwt-nebula-module-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9bff033dd6f4cd1ea320753374935ff75fd394a2a0fbd8a15fcfa1243ddaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148508 Malicious code in terser-achernar-cassini-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541cbd79218ff5344b593c40f24122914bc7da1ce7b64e3ba525419b25e42bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-cygnus-scripts-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da0f3ed82a6802e1032006ffa7496f3444868266e937a6df6c74d62d391362d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146967 Malicious code in query-epimetheus-chromedriver-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499c5deda78848da3c8ef2f45fddfbd7f4904dc9b2b65ac991103c381deed7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141284 Malicious code in csrf-gulp-standard-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ee9b278d75ff46b2a58a07825017782f52f5671707881176249b21328c2f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139877 Malicious code in backend-andromeda-chakra-ui-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ceb89b6247ac00dcceacc0e49ab37722dc05f0d724d90a310f82c2e2c36d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142432 Malicious code in fetch-await-epimetheus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55f3198a2540c23b7469e15f06bd95fec082c5ff6af5c5fa7386896da555ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148269 Malicious code in start-deneb-gacrux-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217f63bece54cd97f2cbf64265aa70fc2de9d8e2e0c835429695d2d46ed483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145225 Malicious code in mutation-levels-antares-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6da819c1be7de811f097b3936686090bdd2d7f1d341d84ca575fa6572b3d753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144816 Malicious code in meissa-mocha-jsonp-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83edc36d37b3d9e117d48042f951af1920347abc4aedbb3249617799e47e8d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144906 Malicious code in meteor-cross-env-promise-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb174c4e59f8d419248b9974b4055adfa5d6c0cb04323bb9ba94eea030294ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138963 Malicious code in racial-chocolate-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df767f4c41ac852c8a914c950c465822ae421c0dd34d5e87fe8649ecb5aedb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...