Malicious code in postgres-spinner-titan-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7660d9bcacc163d4a42e3a4b61caa5d9ebddbbeb182938dffe65d55df730a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-dagda-google-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2bdd909093acd269050ee6c34672fc6bcb6d1f7880dc777e24bb979bea04124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-indus-weywot-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0276c5198a70a0a304293120e13ff16584af2f2ecfb9024ac2e14cc3b044a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-vulcan-equinox-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cadfed37c03594cff64568240b86dce03fc2d9f2b65e0d661fae411d24ada16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140524 Malicious code in centauri-chakra-ui-upgrade-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c97d1732e08f808b9dd9c74b462e75c996c7be35f851bb79e18d0eb37147d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148829 Malicious code in triton-taurus-callisto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc032180d0a076e255d77641301840aef565ca59487ea2c3a303c859bb6d74b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149267 Malicious code in warp-dagda-antd-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264c22b5aaf174fd3e7207d8c30036247f754b17db2f75f89a85ca62322bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139534 Malicious code in aquarius-epimetheus-mensa-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3ec09e7c79d82ae5f01e76fc90355ccd58308c893d2f7f8371ae20821c32c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139191 Malicious code in acamar-xanthus-apollo-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab9a3fbabea8e9eda0274a512f0c48eb29716a7e17bb3f5383dbf3e01f197ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147888 Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149721 Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7c82516605ade34ff31a1afd6d028c24b9db892f1c0ea2e581b868bd8edc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143276 Malicious code in hercules-commitlint-config-angular-neptune-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b24064082095441958e9cb412eefb08dce7f9be0b9c7c34e364b44f41348f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142298 Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139336 Malicious code in alphard-pipe-hapi-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4de964b73b312b6b42e268b5dac8158264ef0225d09240b67e80b973cc7da2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148925 Malicious code in umbra-mutation-morgan-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f51402fb8b8c25416667a5b7b23d3fe2005b81480481f1b4b256cb4a9f4c822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141595 Malicious code in despina-express-indus-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169d8507322147c12e5ffd5c35633e28f481a208635b780d832dbaf2ed12dfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145369 Malicious code in neptune-mui-jasmine-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1df8a6d2bc023876d443ab956c891fa6eed3e890a12c4ae30e21b71e81c3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147775 Malicious code in sedna-metalsmith-vulcan-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bb66a7b11e61ba0ffe2e0d0c433ef34fa0d555fc5381ee4c86e3f70147a06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145030 Malicious code in miranda-elektra-epimetheus-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bc92613c692f422e1eeb84e62b6d937606f05483376161f03de703a402e984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...