Malicious code in promise-nuxtjs-umbra-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6747916a43b67afac536aee936f618012365ded1a68c4b06f03465d4eca2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-phoebe-electron-builder-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36eeabd19bdeac8a1ef874d116c625c345e5f293b115ed04241d7f4b9e3d9df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-docusaurus-carpo-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e17822857865f3476661e6af731756d9683c17d07a7873ad69a30b5c919b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-lint-magellan-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd7ba78ae6ff950c86e95dd3e3febac32c90c13ee98faa58fd9ae9d974af8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-ophiuchus-karma-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49e03ca3f0551cdfc4df212ad67733536d96af6b3b3ed4f34855c841d85f0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-mocha-request-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02491b09b3446d54df684676d132a42d9464b0f5c8f0330438655a1c2bccac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147612 Malicious code in sagitta-publish-npm-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c7fc955c277c3de9a6cc9a4bbef4982f2f62079dcec8f17b305ed1db8ba22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147187 Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139708 Malicious code in aurora-publish-markdown-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c37dc5bc5d8fcb554dbf6f064affdc92e9b34a5aeca6ceebbeee20d52be0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140005 Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149103 Malicious code in venus-avior-hugo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d29dfc5e2249ddfa5c95e7533072684a991c589d4977145b7e99eacad78a296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139649 Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149521 Malicious code in winston-procyon-cosmos-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5551dbc40563853d6ae0acd4a986d5c867b6b5cbaa8947773d0cb09ede006019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140591 Malicious code in chai-html-webpack-plugin-nightwatch-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faf112d9190685ca2c8327279dfd95f90d5ddf26f8a8c95d805f3662f4bfae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139368 Malicious code in altair-subscription-flare-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b71f9761dca3471306127175edf9b552a4c30366e83d5e3b6cd75902c0ef97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147748 Malicious code in scripts-sequelize-init-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97c59d35e035c1d1dae8c136d0747c24a153a8107271fafe2a54c93169f2310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140125 Malicious code in bootstrap-wezen-selenium-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141302 Malicious code in css-loader-flare-koa-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757095f6eeee22ca60e02e83c47e7f28d41da7de62f3a79bc715068c9999fbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145837 Malicious code in ophiuchus-publish-charon-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a859855906fa5998d0602074884a3f159e91c73027f4acfd3770d9a1b8e1f650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...