Malicious code in proxima-sirius-sirius-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b141ae41b6f4e29535c0acaa3fc6a2ee6123053d855ff572721b1822a26452be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144194 Malicious code in koa-husky-indus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9f7e42701036c4e7b90136d710172087d9eeb7bf8d869ff9064aeddd8aceca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144421 Malicious code in link-rigel-lint-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c4014a7c915155a3ac1b7f73f12460e96c04917dcd1ef4161954007d8dab93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143070 Malicious code in grunt-prettier-lacerta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673afa115104dfb8a556d45232b63297c9af0feff550c9689b7a0bd3a244540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145151 Malicious code in mongoose-enif-apollo-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ce8f43c22312e6ec4fb8f7770cc9bb5108ca8697068e4c8b4bd291dd535e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-request-apex-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767ed0db79bed5b2206d9ebcdfd2080bf31ac5b6308a7100b29e891f3adb1090 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-bootes-async-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd26e69c3e192ded739ff679b22feebc040ce7ee70091e860c1087ad35dd6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-reveal-md-adonis-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893aa150152c4868645fa840dcbb49a50514925af7865ad76666bbd5da5a8f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-convict-yakutsk-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f99bee151fa91ba2c17b175ce75ed36f645a5184e29cc11dfd1aa77a8199ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-semantic-release-galaxy-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc373eff89a8346915f7e86bdbe978bb844ddf27580d6e384ee21fd6bf5e29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-celeste-grus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f133612cb4622a9ff368b70b9d7c1d3a32e82cb081c81b65846dc2f0327e20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-sequelize-koa-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e3e8c5a3977cec9560fe30b6c2fd0263b5738ea521484c63f631986c17a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-mocha-carpo-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-framework-andromeda-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bf77a21aa60073ee5c5f6339fcbd7faac1ac57a81404777827d4cd1dd5a0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139562 Malicious code in aquarius-xanadu-zephyr-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2cedad061180675ee04280017b0fa390f96a0e919fa21dcb908376553ce93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141322 Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2036bd03a92e217ea6354ba65928a8ff78ecbf6c59fc278e254c0d1d3153fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141011 Malicious code in concurrently-public-rest-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7370b0ec5373dfb0b05a83b8a676050276f5ef12a004ea6cf2bdbd577aff6fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145200 Malicious code in mui-dagda-loopback-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26eabb85f51c5683b53fc8263b96d185f7eaaa441a518da48c50c0d6bfac767d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142211 Malicious code in eslint-config-supervisor-figures-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e8dc82658386166636f6748e27672a190294e705b2ebc6767c5e4b235b172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...