Malicious code in xanthus-tectonic-levels-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90865d557f01264ee242fb2dfeabb200ed169fc59c91f5f3edb8e2e08563342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187876 Malicious code in luminescence-pino-superagent-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca44ea655f57b006cd3f79aed4d56a7f533cc6dc90375b078867d19ed03bf2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189551 Malicious code in soap-auth0-tailwindcss-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec2c20f4554ecdd1eb1848e47edc8c1868596d8237df69b171abc1da7ceb1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185994 Malicious code in callisto-sirius-farout-multiverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfb7b40fd7f85e10a74639eca50baf86b17e659c163ca2307d9e6731c488a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186245 Malicious code in commitlint-betelgeuse-yaml-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1334745017722dbf527ff416d1e9f97996036c5e8c403d3a34945f517279cfe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185721 Malicious code in babel-init-changelog-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23b614267da4f23f5f60e5cd915efdd20c67963924c7f06564b4892edd649555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185661 Malicious code in auth-pm2-xo-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60541e6f176099b0b6014c32803b87028642aab5dbdef63c049df0f8c28d8ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189698 Malicious code in string-index-dog-abstract-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af2d6d92154eb01c8b45b503a35405d1411364034f103800c56b39d2cb0a2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187121 Malicious code in gatsby-enif-tachyon-prosthetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3e1fe40b9f4663cd8b878d886d2d8206a84740ad4a30ca7055e0b73b99ffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187702 Malicious code in koa-vega-zenith-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a04af2364592a4dbe9304c1583200538072652b566a0c4367ccac8e31b977f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185700 Malicious code in await-supercluster-prosthetics-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1842ca75811b8fd24abb3a9ba059135d9f54a7ad3dc352315b58c3ff798aa88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186468 Malicious code in dagda-event-despina-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4af1dba9edd14b6b9639544b279b4ddc5e819a325e046b9aeb564916b7e249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189348 Malicious code in sanitize-module-pi-code-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ede5ca909182567ae828158a0cfecdece92da6f9f59062cc498e698ab9cb46c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189981 Malicious code in transpile-refactor-protected-promise-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 249206132416617510c72a18f15a05c292b2a41b0bb2d77286650a4c447f02af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186553 Malicious code in deneb-warp-nucleosynthesis-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e70719cc700229a9dd67dc10f095ef7a077cd2994062c4934645d61f181e602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186032 Malicious code in cat-minify-cold-reject-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c65a38066677839d90818b4977e99e296362c59be875c64b11287406021b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190231 Malicious code in wasat-cosmochemistry-nucleosynthesis-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebfd3a537468dba057e040fe1e211e8bf0580033d12436164ebfafd5c30b736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189600 Malicious code in spawn-scorpius-antares-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb9bfadca6d920bd34d364ac84ad6c3c22634e0fe9682e0ae3301fc85d6dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185873 Malicious code in book-good-old-sun-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd52bc87cf6a49f1316acfb38ffa8d78d4dc56904ce569006a96a9d6b4270e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186460 Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...