Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-hydra-radiant-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b95aaf98636cceb7379e4df4336d4d867d914021b5a92d636bba39ae4c0381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-rehype-magellan-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cd795e4bf8a290dcb46cf664f3256b9bbe1c32d968fe59c20bea542a8a7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-prompts-winston-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8d9301673d88daa55f7e71755ffdfb1c684e84fb6bdca24e668e65b18272ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-axios-hydra-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf107bf1db4a8661d5f4e52fcdb8a3a86bf43c0f2d6f71ec9c10a8f7088b89c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-andromeda-axios-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d7d8baca28556fd3dd98032288246232de178e0815872d5dda419932b7574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139750 Malicious code in auth0-kinetic-halley-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d235ed679c71a9c92ea843e98ce02b27b0f5d8037cee666eeb409341bd9bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149720 Malicious code in xerxes-slides-semantic-release-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9aeb4ad6ee9602aa39fd98035a3b4dc787423994528a4f7d5bd4c50c239de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139184 Malicious code in acamar-pm2-deimos-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9dab467d508ab409b4e5d6bb31c1abb741e9efb26b754d9f2049fbcbf176f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144303 Malicious code in leda-xerxes-farout-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0673ffb4856e4955334686e0e25921ea6b7a948d123da5b7e488cf720f135dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-weywot-wasat-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290545f725cd279a94b1995f055687e9776c2b2cb77e25363e0b64b43f5e2637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-dotenv-safe-express-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cea3b7c73078f287e22f895f9b13af68cee4ba61b7c950d714e05f780574fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-winston-less-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5865ce4555741b83e7e2292332e129b48064cdba03fd7b905da6b142e1f64b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-semantic-ui-elektra-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1da63aec152820d045eb1a524542bd027d82aa0a13ad938501d35379627961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140464 Malicious code in cassini-epimetheus-terser-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d6d8fbe53d92208051c449b0c2589e7bf14cdcc34c85e706f46257023b1c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142188 Malicious code in eslint-carina-forever-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f91ef5dc4c00f9832c98df57115357c304787af3987b4df8eb1f049d795218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143386 Malicious code in hugo-dependencies-quantum-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b733dd45266f44ca4e71511724ad636361a874de871071fa370d22d4f20a608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146487 Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59df9e16b1d88777561b0576f22280225530cc5984f4353928fdfe3d86100d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd5cd6e4b9659fadbfceeaadabe8b3c137cd2fcd97adaff2f97d46e62e1459d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-beige-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39d17fbc05146727718b7183b415c0f030436b57c5c075c75e935bc94e645f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...