Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-bellatrix-postcss-loader-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f58a61a1c9e7b168034026bd7f3fbc855466854bd12522712eb602f4b62e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-quantum-gemini-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b23ce53acc96ba7696a17390f3443dd9d989aaf078d6e6315d2fb91f08473e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149103 Malicious code in venus-avior-hugo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d29dfc5e2249ddfa5c95e7533072684a991c589d4977145b7e99eacad78a296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149084 Malicious code in vega-bootstrap-barnard-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df34bfa4f9162dfd543970ac40778bdbf4311d1bf4d0e034d87cf32d5e11e027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149355 Malicious code in webdriver-mocha-metalsmith-ignite-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f8d1b4005ff300bf85096906929c42441da1b129e398d9053f3b4a03241c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140418 Malicious code in carina-odin-loopback-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9a886bb982839ebda50269955d0bf11faafd1668c2f4578ee66d69641b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147768 Malicious code in sedna-hugo-webdriver-manager-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2830d155cc9eaca20b67d22d37ccb375f000c8fb86ce6a871a47af6795a59de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144908 Malicious code in meteor-dotenv-safe-rollup-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fe81462178eb9408872f3a68bbc4df7e6583b2b32a7a929f67e9125ec76579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144031 Malicious code in juno-magellan-acamar-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141328 Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e20a22a9c22769398e8739c99b3cb32ee807c0d7b81540638278571f89a9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147187 Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141992 Malicious code in eleventy-callisto-forever-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447abbef07e2169825384d0a4f6cd21674555dac84ac23aee274c4866a00fc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148705 Malicious code in toml-commitizen-vega-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6681488f2f6863e00ad9ecfaeb147850e462a4e95077c0e213b618430038ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144900 Malicious code in meteor-bootstrap-impulse-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077869429f1ca60fcc59df622b3ed1c2ae79c5d9f64595ee373a3b164d265393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144473 Malicious code in lint-standard-dependencies-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8f31cfaf6351f3bb47ad16bf392d1e308291d0085dd4096e670b4e63b6b8f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-scorpius-ganymede-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5285e61f586138fc557d3e0929f99231cfa05eaf4a8ae41d7769f30ebd2e99ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-chalk-browserify-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4135ccaa60e37d9c574a7f14ef998a716328721b7261309164bfd5c329e6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-deimos-vulcan-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87885cf83feab2e1c3534b6740d4189ecd601dc4c2079ff35d4a4da7bf0a1b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...