Malicious code in mensa-hydra-ophiuchus-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975502bdabe66180670d191f6d6972defd72b26fe8d949223a83143d48948ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-umbriel-bootes-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af263708a4f3826d4a9cec48859fffbdd13f5d22aa662e98d5196726b365e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-chalk-rate-limiter-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bbf56c33e1c969c874d1a9534c05a591a456bf9708031149daceb8627a3044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-rocket-pipe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ff2f73a968804fa97093b76b356f86a3c51d62f7c7b520c02d5fd837aa8eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-pavo-tool-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2addda10f23ed7cb19188abda0a250d743d2adbdd413ab1c73bcc665ff6803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-configstore-telesto-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d123a83e0adad67619b53cb90be0f24177b7f9990c76a5d254c073cd35b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-transform-taurus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0909ba4909733d4fac4e56663f46711f68ddc92b68de6f9e53ac2818f36279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-neptune-celeste-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-europa-forever-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8907b0323156f50189214fc22cd49f2c00cbbef7df9bf25c4388076a13ddb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-comet-apollo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc55dc02578c07a1ca82888f7559c7f7490d510463dac842eddb8680878a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-yonder-deimos-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c6e0b8ba9c37ed100526ce7ab1585a7dbf6b20cf7500fef47c4c6d1dd1625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-mongodb-command-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98ef2c255a17ebbc778012be0f17153c4e129d9658af352e7596673b793b339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-prettier-jekyll-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1193615f9567405da1dc0cc9bbb83540714d24ef80292fff0db89a9eeb5db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-colors-sync-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc7d0428c018b9d34e73281aa3acd0df3ba2771cef2f568249f03b9b919a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145071 Malicious code in mocha-commitlint-enif-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7e9e5034c33ac7fdb51b5ba408e5fca69992dde96949b71cc5cae885249096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142668 Malicious code in foundation-blaze-airbnb-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38969f667ef862cafbec8067822a7b84c1f7bfce91e5eba9a51ce5e997bfbe22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140810 Malicious code in cli-sedna-xo-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea95c52ea49932e465b636027c985528b53c29b37dbe031de9640b0ba8b01cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145451 Malicious code in nightmare-ursa-non-blocking-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed89bfdd8b3aa3d1c2842ac2f5b9491ba021c343e251df6144e233f0bee20006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...