Malicious code in avior-materialize-arcturus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a0abe30ecfd362bbf43ba3c31f8f5360240afaf776b1fd268c9fe69ee0e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-inquirer-delphinus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f99d7fb9432dd30ab8ca0c7996dc80b6510b5ece02616847e2483aaf06702d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-registry-andromeda-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e537ce0a5cc5e46f30d717f43d4ff0980a85f8ad7d038de681d111fae1a26a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-nextjs-playwright-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-geckodriver-colors-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b1ee4a9c3a715364f26c25e7eb1c0eaff93c630929b0eb42fffe4956558882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-dotenv-safe-delphinus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642878f7ea02757310af6a4a32229ef548b1d47085028952b7c4f950221c7adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144698 Malicious code in markdown-pdf-oberon-rest-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6736e26ccfb46fa55ed3f0c9f17c3723e146a0902526a7486246a1f5ab8b426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-registry-chai-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d5e0a4c75e7e750b51f9106f6d21cbf53719ee3b880b06dc02013b87e745c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143652 Malicious code in inquirer-nextjs-galaxy-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bcdd082ce996def33fdd212572b9582cbc25f6717782a182c5688ad39d01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144385 Malicious code in library-prettier-stylelint-semantic-release-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048a235ece038bdbb37f29922f586e5674b5501de5239c0a7b67a15de6fa8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140872 Malicious code in comet-cors-procyon-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a2a89b119108ed4e870e27de544670e728a8d329e9e73ee1f8bbd76d6dc821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148726 Malicious code in toml-websockets-dynamo-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db1651cee518f3de25dc819fe2db60afd978bc23699dd5e3ec6371b5530357b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141993 Malicious code in eleventy-csv-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef3bc58089df1fd8c787fa0c6b3f40c2656d4f1cf48409ae9581d82d97c9558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147908 Malicious code in shelljs-ariel-ophiuchus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693053840c257ad600fff44f093b29ccfea20e6067e1597aaf6f8e47ebdb03ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144621 Malicious code in magellan-alphard-cygnus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb03d334d5fb3fded9247c374d838c01faefeb9b836133ef2f495a0c002fda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142259 Malicious code in europa-child-process-link-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22975fc0b1cef30e326d92c69dd05052e47b7277630c2b57b0dcf5e1986f379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143467 Malicious code in hyperion-blaze-acamar-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90140d8ff340cc1c854a9713092c1c8b83c93d8a48f428989f69219cb8a47ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...