Malicious code in loopback-elara-procyon-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223bcc66a7c9133ca829068685fe0df368e7add5b22eafb33ec966764557a1db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146832 Malicious code in pulsar-gacrux-geckodriver-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcfe120a273827ad98cab31f158c503440f5d7151db9b0197fc91b9452b268a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-development-jovian-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51464621a81af6bcff023d345004235362af76b61b06c3f4b8d0b27d4975dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-scorpius-quito-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b647ba84e1ca61f08add80e145bd647fd81f524f9ccefb4c7ecd667a01432a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141251 Malicious code in cross-env-dactyl-regulus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67417c0546de377a93c13bd911465029d14604266a506e6c88506f7c9d86cd1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147739 Malicious code in scripts-native-materialize-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6919482284488e7a4732343ef89b706c40f8b4f2f0c9b9c59831cde32ad400f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142058 Malicious code in enif-public-halley-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba94d315b8f5afc3a2f666a48c4814aabc87877ad09bbf2cf1a000bd7e0ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143702 Malicious code in io-node-config-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930c2a4eb6c0a881eb361c86511cd96aead7d8a166d8915012d34c8a2e936537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145578 Malicious code in nodejs-titan-thuban-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8539e22779886967de1cf80034d2581c2dec1fc51ee6b47274fac4b08eeb6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-spica-figures-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3acdf5fc9f9d033c6c7d517e33b6ad029d2ed749734530d1b07dd7e485c2871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-dorado-puppeteer-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3238269c2f191b403634981c58aa5ffe63bdb37c7dc0633c090a4c8b8d264b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147137 Malicious code in registry-zenith-redis-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3548f1d4c8fe3a799f8b4223195ae7594aa056e62b63f20ee05bea9627c9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144829 Malicious code in meissa-process-query-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ae5fdd1780de97e98dc346d7a17d21adba49ea87d63f32d85c3c2e030b0131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142988 Malicious code in got-superagent-passport-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0230d14e2b4ea76e2119fa0b86c46d053d908cf42b18a75e56f3b15296d96fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140583 Malicious code in chai-ariel-leda-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0c19fadb59ff1cfce3dcfefcb8cd39cdd8131cefd27b03e987380a8faaa1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-acamar-publish-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b96ad5ee90376a01e0b366643303c92ebbfce04bf0dd3baaf1e33fb450d196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-meissa-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8770522c3fd3f632c35f7721e8ffb1be3ac635d15c09b8d80c5fe9c999b844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140994 Malicious code in commitlint-readable-standard-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee74897cb470305c5a181b7888799edaf5856fa3361abf88d8a8e2f0f78bbb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-dorado-ganymede-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84db3f327225b1c944bb3fadcbb5ecafcfe89a049123bfc6afb6d2351171f212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...