Malicious code in jasmine-bulma-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 378d5568b728345b170c22d3c4ce9c4d7d79cd2eef452efe9948ea118b875b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-publish-gacrux-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0824920954fe0c5e346cb462390f5d5eeecccfb9b68a435282a77cbcc74d368c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-command-superagent-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5daf77caa0e93e143e89450b26ceedf166d8ab60bfeb1be48002f019ced103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-element-ui-mongodb-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf347523d3c56df3c45f76aeaca15bcd61fb5768dba5c2a63dba018af6657e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-loopback-ursa-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d635077354e4b6681fd7f7c304bac7987a4a3995a35a4d7339642ed6f74a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-fomalhaut-ultra-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d7ecec8643a109cadd6acf1e6b57bb5b6e6de1b9db44d09008867658c37908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-jekyll-algol-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237ebfd128d365a85baec16de6eb6ccaef065fb763230f647aa7d58e3f3ad1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-antares-commitlint-config-angular-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65e5b472bad4d63da0737aa8f5c719df563456c73b01cfda2fccc25d6db55f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-uglify-js-version-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31193f251a950336823c83c49adcc35a2cc3615550b6484a164e03c4c24f51a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140899 Malicious code in command-docusaurus-phoenix-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996e2a382de928ecfd8eaa5ae6f897a6b8b2ee9a42281ffc74a5128505b36f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147550 Malicious code in run-script-ophiuchus-cors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a09fd213361677312c1ca5e7462ebe175bcc01115ff87099c130dd7a70fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145780 Malicious code in octans-resolvers-inquirer-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce10f99dcad14b2740428d97e64e745d7d2d3478551e49ef77c01142768d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143773 Malicious code in jabbah-cressida-eridanus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3306fc17cb95846ac5a3a367c5869ade615bfbfdba0131b4a319e8ad4da9df03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146693 Malicious code in protractor-parcel-wasat-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a7312843f5c6993959b1b1e02cd38fe30281e4bae43d85f034a6b46a350ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-phoenix-testcafe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95d3d3e4b7723dff42ce077d004d0a8900e90aec20abdf5cf731d1785c3a26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-metalsmith-cypress-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bfcb7cc1eb411b112fa6af69eaab7717479dc39cd47dbe110c5e2a84aa634c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-cosmos-soap-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe0f54fbc6915846fb2b13a32feffed132c1645ae6588717350c5848deb52a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141535 Malicious code in deneb-callback-terser-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125befea8f472118838c92df441d309fd7c4676366f5a833ccedcb1cba6dd12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149625 Malicious code in xanthus-halley-gravity-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2029e560f0f7c0132ab1ff4bbde7603b0ac509b73a32937e5180b71d67fd68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...