Malicious code in fetch-await-epimetheus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55f3198a2540c23b7469e15f06bd95fec082c5ff6af5c5fa7386896da555ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-blaze-betelgeuse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fee5f7c3e2acfbe7402c84173336a1d9eb3ff7a298a28a3038a72366844dd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-draco-pulsar-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78722e2d4ab57a71b6b7c575a6981e902ee8727337b994067320b77493c72af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-docusaurus-run-script-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0005827d3b1e3675599308fd06a392bc52127f29e3a5222522c49438e4e5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142185 Malicious code in eris-vuepress-aurora-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79fee7f700347a0df6713b6a5c31af9087e78bf571b35e0dcfdb79460bc8a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-pyxis-cassini-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46047fa723bea944665489dc9ccb6b9f98032af680facf37378bc1086f485f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-celeste-release-it-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df8c6940e6e3d9ced5f326a094eb0c4ed187281f9a643fd72117c93e7dbf29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-loopback-lynx-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966908cde0064e80dc5fbe3f177c31a09a9571cdb46ee3bd78ed83cee54050d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-janus-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7173d4aadc73cc2abb8592799f4e82a48e637f593e78b5e8f51a5107f7e5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-cosmiconfig-semantic-ui-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5df92a7b90329406eecee7a3a400b2d62ce2844e17349a089b79a8fe5428888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-webdriver-mocha-ganymede-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9ebe0367f6386af7a0bc4b075a8402500ee6371eeb019f4f8307ab271e7fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-bellatrix-lyra-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf06a743d3bfbff016256aeb9587acce8f1f6000463f12b4a837aa3bbb48b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143444 Malicious code in hydra-hermes-weywot-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f42a1d329c45393542f9e8ec59bed9df73c594eee4af007134fa1f73d8b3b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-gatsby-yildun-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9176cc856a7e1b77aae4968733ab2bea8d8ddf71d2233a9e6f1ef1c0f9e0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-nodejs-native-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdfe7b627e6dbe13e573500c4bac8abb0660f48ef88bf69c58ce61ebef05e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144774 Malicious code in mdx-react-bootstrap-javascript-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e1744c55940a789327d9b33cc8d592c73c78aba0180a6c3d6f4db1c9a6d740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140487 Malicious code in castor-leda-init-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...