Malicious code in cache-eridanus-auth-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ca0649729d1dff4f07747f531200bc22904d80ebcbccf330d3a9a9072f5251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-pino-pretty-json-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d4a1e9615913e2d0ca96604718fc72033c8c2e908c507adfcc64735ee8f924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-fork-writable-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e0a868c140d39ff4ea0f7413dd5134cd2b0fe6c4047aef2852b0a0821c4ee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-helmet-yonder-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3695ac089a989128e4b219331d647e5f45cf2b19e34bdf28bb8578d708503fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-nodemon-lint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eed5e8ff22cc9239cffa973753ab2ed9b0ef01e31a43a734b87a8a922d04e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-superagent-neptune-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f96e51531e573a2c554dc865f68992d1f2b7b5668f83722fbb84f0dace0aca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-async-hyperion-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b6089e45b3bf30edc036b6652f4c1590215d51ab6b5f80ad7b9e3adf40564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-ignite-less-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c288fec2d5387765684208aa7cf6ecab742922ab14ae5fed28c8176b4093ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-repository-algol-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f9a095a39a54298b2ecb6bc7b7d7c95b7ef74618537abcabf32c2fd88630c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-octans-proxima-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b3bf319b92e4a0abaaa40adf046cf088a33ab1547bfe298f363a01dbf049a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-polaris-resolvers-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83cf514d7bef98542ee626677316d7a5026986b8fefbba0f83799577b78ac3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147248 Malicious code in remark-janus-socketio-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e00c3b387e0d4c24f5c5bbfa1bb719d4839b704ca295d7767ad124b27dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143618 Malicious code in init-development-barnard-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e86b56f178a7a2f2c7c9583f0868455887d6bf2e1b76dad6c87cd4f820e24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142323 Malicious code in event-sails-public-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d555647d04d651bab45eb39b53f266c9fb4e89c2b9419b02a13f17aa58859d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143188 Malicious code in hapi-lyra-europa-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f82c330c425d4821d5ebf44a02c1d02a32ed95f93e53592b907f5104a831de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141233 Malicious code in cressida-gatsby-sirius-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b83efbcd56bb732cfdce5581fabde7d9d497bed014322bbefdcb77db4b1d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145800 Malicious code in odin-mysql-nuxtjs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4033b37fcff598341cf0941569995dbb2e1ccdc078a67df628d3d6ceaff93234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141137 Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142922 Malicious code in global-andromeda-publish-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a433453620d12b4b3f0344641bc39f39ff46ae0ba73b37754ed2da6e1646f3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...