Malicious code in hermes-testcafe-toml-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a440cd57546a04a8a84419e52d295a653a4daa9bc232f5fb240bf5b9cf716493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-slidev-webdriver-mocha-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3f5dee4442b78a6579d6e4fc130a2f34b0cd82a352dd4c98429da5cd949c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-proxima-library-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e290981069fcb3fbb09a26760568a295e5352425ef1a2aba07e44b744be012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-halley-gravity-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2029e560f0f7c0132ab1ff4bbde7603b0ac509b73a32937e5180b71d67fd68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-meissa-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aa0eb53f38046acb51de930d7b4ee46451b9bb5195ebda094eb86331223a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142918 Malicious code in gemini-server-ini-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5d0360722cdc73ccb7eac133b17b09cfa918f7f0436c2a0cfa464bd4b5a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144545 Malicious code in loopback-cors-scorpius-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66719063eaa5d6534858f4fd987d7ddb6562a50ec3a91cd01caf702bdbc25571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147102 Malicious code in redis-hermes-mocha-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3503433e49e30054cd2630595517ac5f56481aa4d95e98c70613239f8bdc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139263 Malicious code in airbnb-terser-deneb-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e88e788e5051d47ac4462b17dcb5b384b0f924a8510c377fa0fa5a96a5a2d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149817 Malicious code in yildun-materialize-proxima-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad786dc16177a4cd5009a59ac2e5b60390ff2ed67a4972b4194d5e84a0b9a041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-repository-cordelia-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ca10128ca1c595bbe11962c6144feccdb2b3ab4f06fec3de750790066d5095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149413 Malicious code in webpack-wasat-pyxis-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd09b6ad20379082e0839be824d7f3137181fc436b825bfbfc5b4d34d841fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140669 Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139495 Malicious code in apollo-backend-callback-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b029e2ff0253adb366a1851b7917fab7d2ea68fc0c4fcdae60e82ac11e422ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141540 Malicious code in deneb-convict-loopback-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b47cb552bd2273944966f97cbddfb7938062c25b736c668a27c6a067a040ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140180 Malicious code in buffer-xenon-meissa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9313b74b72033a3c8808f05235d43db0602376af815210e74dd8bf694f05bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141983 Malicious code in element-ui-spectron-webdriver-mdx-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b8d470d321ab03a10ab9f4052b8c7b555af0f0125d6f018b30dd015827bbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144662 Malicious code in magellan-sedna-mysql-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b65804b6bb09003a5cc8c885d0d244a90568ca367173e330cce79e3d3433c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146202 Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc91661a591ce06363d9a044e03d074a45545f80c73bb0fa7a69204a4a2561b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148515 Malicious code in terser-css-minimizer-webpack-plugin-loglevel-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935d20d07e495cdcbab1cc3dda880187161dadfe8d56c02d11fa5e642119489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...