Malicious code in version-uglify-js-draco-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26869fd77a392ca463df0916b836137bfb66b07bbfff340b495ad7e48b566e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-request-websockets-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-reveal-md-betelgeuse-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5353a675fc71a6f7979ed34bb601e42339f6f0c11956bee5628b60cfcb84881f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-loglevel-hyperion-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07215dd570a9f1ba91bae4165f316f59f121eedcd225aef447a190551ca6cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-sagitta-inquirer-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7915274b61f1f22bf6d1e217c5cd0ad40fe1ce4bad4d9789e88d6007dac75532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-elektra-test-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54feba1b0ea2f5045f52f560727f715820fe005c0b44599e9e1078f5ea1108b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148407 Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee6b53e9ec9c7ca4e8ae2677ff0aca09ba263bea30c7f030cd59a350bdb6015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149066 Malicious code in ursa-phoebe-capella-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4680409f54b1672280ea548697d53e97ccce528f1084641660525b8023e6b0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139430 Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148144 Malicious code in spectron-webdriver-uglify-js-figures-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8789b9b82d67312a6f4a4b617e59e05f8880864510defc0e5ca8981f30aa0dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148392 Malicious code in supervisor-hyperion-elektra-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5db0db05fb5d54652dfc6ef8f14eb7198b85498ccd575cdf38a4587083e295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141416 Malicious code in cz-conventional-changelog-dorado-commitlint-config-angular-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7bd00c7ac28604a872f9aec913094464d5a6717e2f388f33e390d88a8f4360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141936 Malicious code in elektra-aether-rocket-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d35c84ccd5965f07d33d6f6f051c93ea065866d5b4ceea168037f7d7a05ff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142815 Malicious code in ganymede-procyon-gulp-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c3622c9620d1f5db3a00260053942b400b3c7190d56eb40b53dfd21296efbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147432 Malicious code in rigel-less-lint-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0250b17d1e824b9261142e2ef10bcd989d933f1fe55d49cfd55a9fc7ff406bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144370 Malicious code in library-betelgeuse-yonder-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d464d999af81bcaceefdd858dd914d406dc75800c99c9aaf27487492862826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145825 Malicious code in ophiuchus-kinetic-development-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cead306982c4e53b259b7fe60ba0baf7a14b6ea52db778371e3b45751817ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145268 Malicious code in nashira-betelgeuse-server-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114e106d1af305fd424f041b938c63ed588b82a0134eed432a6241a89e0288be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140025 Malicious code in blaze-lacerta-semantic-ui-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a663bd504b92f9c6b5898ccaab92e415af2335a8bf3ce22e06e7b89eaff5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143090 Malicious code in grus-concurrently-markdownlint-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967406994297f477ec4001272a2beec41ae29e16ba0f0c229bb246f1ce5bbd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...