Malicious code in apex-magellan-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52039775c5083912cc2f65d59589cc60afe8445d9510280b6907bc13154e2861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140945 Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145695 Malicious code in nuxtjs-astro-dotenv-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361f069c8f34b46d870c8a13f9857e804499b8f943a16c7ba015da58b6adddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-command-chai-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd633c6313d4b9c28b2101444cb08386db672459f194e7ba9bcd01f32efb480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147707 Malicious code in scorpius-deimos-hugo-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927c90423c37a0e1916c96ebc222fef6f8943fb8899be71e305d6cc4bfcc9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148232 Malicious code in sqlite-non-blocking-native-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bb8d693502367467a865250306d6251623b4fa2b1c23100452f92000dc12d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141964 Malicious code in element-ui-charon-juno-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc55b9ee51dffe3585c855ea526d5c0021a493b8f3118d417c5da181aa1fd42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-betelgeuse-cassini-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de30e4d515c90c8d81f0aee56858ae6df343a3a02ddf287cc29b3b20c1380a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143544 Malicious code in impulse-fornax-mensa-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cab4005e2a8f44c24f49a725035d36143642544ece072d87ceedefd8127e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143171 Malicious code in halley-vulcan-nightwatch-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba8459812b58b3adb0a734a6bc6f6acbcea1e099036c9801ce7b9bc035bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141837 Malicious code in dynamo-sequelize-hermes-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e59e09926ad401601fd6a02322162da69959133ab0d2524b3a52697d3929c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145332 Malicious code in nconf-ultra-phoenix-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23544b478756bcc91654d2d0acd95386311f1aee22d1468ec6edb87ab4e4412b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146372 Malicious code in polaris-stop-build-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a373d1a5eb1fb842a336b3d3996d1ff50d85dbdbcf45ce246eec4e06c9cda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147318 Malicious code in resolvers-bellatrix-jsonp-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85843142028b8d29b219b1af7c43c167dc226099b6803ab77b73bedbb4a5f9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139927 Malicious code in bellatrix-bulma-postcss-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5404a833811b66ae189517e867b655010ebf4f69b88a43eab14576f3f8879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-foundation-equinox-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b24c8251b01481291011c1b04906ea934e07da3ad0d80c98d0376d16886f325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-sequelize-init-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9820827f29fae3624ef8497c12accae1a6246f1b4a7a18bbfcaead007b9200b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145992 Malicious code in pavo-bootes-capella-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd6ede5dbb0e04dcbf0377128efc1b0a5de122059b8148a2c1126144de4294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-hugo-winston-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfdf061a2794f8911e73a0f36fd0d80603c5fed1800c355ddc0f4ef97e5a82c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...