Malicious code in umbriel-transform-galaxy-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4278a468d54c2a41272a00e6c27081390b88957c1609f8f70f2c538827a5afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-vega-oauth-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eccb7ff3878e6e3a8763872691dd769cf8ba2ee0a73255029d37d5963dd2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-koa-version-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-pyxis-cassini-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46047fa723bea944665489dc9ccb6b9f98032af680facf37378bc1086f485f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-charon-rigel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b81c14674542e9356c3817bc7e5d57607720d23252ff3006a97b314cf0b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-nuxtjs-procyon-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b925d25988baf7e067d0e986f7a02f01e3109348b252ff402f07ac839ce6c6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146773 Malicious code in publish-alphard-css-minimizer-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df07588139af13f8b920c87e78bacd917d9829ec1b3565249015c0dfdec6d5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140961 Malicious code in commitlint-config-angular-dactyl-tailwindcss-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6a0d51daae52a547b9b3598450667891d02849ff498b84efe3b37fcfd722e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140499 Malicious code in castor-xo-process-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7e9ee758d3225c0ac906b5d2c0af7eafe128a6688181ebd5cc15facb09c278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142806 Malicious code in ganymede-kronos-oauth-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc815bc9ad378013849b00f6447853f5648e448a02cd211beacbeb2bc05de3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147815 Malicious code in selenium-sqlite-izar-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8953c630b9079488ae498842bf4cff37440b69ff8f6b186fe0366168f2c841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149093 Malicious code in vega-library-schema-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dcc95f4dea0db952210a246c97eca63e5bda6d4afe8728102b9082fb2aeeef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146096 Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf8a0f3e47fb0a4d035bbab3e87f2d08c738bc482b0680f20049920a2b45498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141260 Malicious code in cross-env-nightmare-public-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aba308c0195b2c6c00b9e83e8ad088d62e10fe41045b98ace2fcaac2f491d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143306 Malicious code in hermes-chakra-ui-phenomic-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146807 Malicious code in publish-prompts-dynamo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc122cc572c3d2d1191ceaaf9b9258aad88aba7da7c0c08509fe79058b68496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142345 Malicious code in exec-jabbah-dotenv-parse-variables-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e8bb99a6b90325f806202d91e9a281f5936e53f6977ea1a234810981987eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148694 Malicious code in titan-tailwindcss-koa-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc07afb489f3fefb44ee960e27915b773a85eca1cca9ffa50c5c027d2283e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...