Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-aquarius-nodejs-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f67fb71a3747d55826f4467a6d22ba0c7a48f45bd691fa8a323662c2c86b26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-update-jwt-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d19bb2a6946efa9f9c2e4315a157ed2a2d20cf0be24ac89f296e1801214eab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-child-process-writable-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71630d74ef3a2db09852db5443aac9a0a99d34b52adf3fe42b07043fe9a736b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-spinner-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e98cd0affb029888ab835e51cbcae72cececc82a87445c1f0b863fccc699077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7031845d6915d8df0ad0345b9b289d606eb2fdaa90aa16ce82af82d3da234c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-vega-zephyr-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02552b14dde06edeef7b347a403a0d5ea395a9d45f99471afc91942b69d47ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuepress-winston-middleware-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8309a318511aca365817442dc6e688949b3c20e8a4fe41511579f3dfd9b29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-config-fork-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893df40a746a89d4d64ef239e7ba6265dd6d0d5a966591c11ffbd8f4c401280e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-bellatrix-postcss-loader-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f58a61a1c9e7b168034026bd7f3fbc855466854bd12522712eb602f4b62e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-dagda-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896316fc7d2ff80226f0bb3d262ae8bed0818fb9a42f3d7bde21fff4fcc37e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-celeste-release-it-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df8c6940e6e3d9ced5f326a094eb0c4ed187281f9a643fd72117c93e7dbf29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-procyon-impulse-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de5f3663de96a20cf01a988ffb3549bcad8ba1ba022d315dcd7dd91abb96a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139734 Malicious code in auth-yaml-slides-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d881b1b3d4ec241b1d53851ebff5ff1140a61b69a53a01c345a14b962fc49d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141162 Malicious code in corvus-ophiuchus-kastra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1167ba24be7b9251d59e542b0593599d3d543aacc86c2bd0a6b7643b4babbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149103 Malicious code in venus-avior-hugo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d29dfc5e2249ddfa5c95e7533072684a991c589d4977145b7e99eacad78a296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142163 Malicious code in eris-blaze-pegasus-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649ba8e5f1092cb16388028b23ead6b8f6e1199fda7ac9c199d2088db3c03feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143385 Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcce134916e9f9c15c5c57472e9bcb03256befc163c2ef8dbc09f3775477df56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147187 Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147748 Malicious code in scripts-sequelize-init-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97c59d35e035c1d1dae8c136d0747c24a153a8107271fafe2a54c93169f2310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...