Malicious code in wolf-enceladus-telesto-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84a7209ca76d3f75e1441dfa06b102101ecf201a5d0202b27c3ce4d1f243a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-centaurus-vuetify-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863a437567331527ef5bf1c5bf083886267c5713fe775a9ea7d9e11f661a64d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-neptune-sails-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a139c4e9108362a1529b5c9b7d2e6f453474a8e463160919d7e9de66c207f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-webdriver-mocha-hercules-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c377541408e4dd2d0d9420417ccf43e9296fce7cdfd3020e459e556e4478417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-changelog-publish-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba5a3360f88d40dbad8ecd7069fffd546d8daa1e0992e70276075c9638951b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-pegasus-leda-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dde75e0281b160a1a965a52d453bc16bb0ea64cd2cfb4baf63704d8af393200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-bunyan-loop-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2570039e57cef0e6475a2bb439694e2b71ad50221717be387abd3674716b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146894 Malicious code in pyxis-webdriver-manager-selenium-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd635838c8a3e29ed758fb816df1aae5113f58d4136c3bc38d13731170c1aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149672 Malicious code in xenon-xenos-sadr-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8462fcddb73bf27d7bcabb1adc1a6ab4a89bb78f09ca7930c977f334739514f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143231 Malicious code in helios-event-carpo-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4ef0a390f4f22deb490f66721884877ad3efa3d335bb7d3ad8dbf168f43ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140446 Malicious code in carpo-jest-celeste-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5302a6da915ba69b2ef4fa60cdd9d629cec52485a615e36d82215554a1e685f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145141 Malicious code in mongodb-spawn-ursa-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148986 Malicious code in unuk-sedna-cross-env-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46ecc9ad12a0b9cd7f2d3eb400ba8eea4dd4bf8faeac232d404afb24f07801d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145651 Malicious code in norma-supervisor-epimetheus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21559884472e9184dddd2e9706cb4f381d1a1b893b88c58be5f19663ce99356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145644 Malicious code in norma-iota-superagent-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317515e396939c7b4116b7f35bbb26a114b0293b399cec840e983081cd5c2b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144337 Malicious code in less-loader-virgo-phenomic-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8ead56d5d6ecc6040860414893d3628f57a62269212a768df83deba87f671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139362 Malicious code in altair-radiant-comet-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc2aa8d1279b2b923e8a549372a45c9413fd69d357c13a65d0aede79fe767b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140040 Malicious code in blitz-cressida-cross-env-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fcf4059103d0880d4dca99c12faf326ce7e1e5349fbf0f08197f899f91d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146756 Malicious code in public-cors-blitz-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7bcf7e6061cc2031bd3fd0cdac81677b4939a86b79ccdf495329740c6e38724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147249 Malicious code in remark-jupiter-izar-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f042cf9e93ef7df1301cd154a2f46c3036d8aa59aeff13d8c1d9854451064ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...