Malicious code in betelgeuse-jovian-virgo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a33fcdeb4deba0f4170b4afadec77720fa04d291e5fbcf73dabae90d835660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142086 Malicious code in envconfig-sagitta-procyon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf67b16f212ba924c7631f97f60e80217eff08f2b58584d029b03c21095a338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141283 Malicious code in csrf-fornax-xanthus-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d696b9940240241efd098bdfb57e70794d34ea3aa153ce32674ce12d10a5db01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139927 Malicious code in bellatrix-bulma-postcss-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5404a833811b66ae189517e867b655010ebf4f69b88a43eab14576f3f8879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144034 Malicious code in juno-nconf-odin-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1eca6f10b55a041a9492c18f053fae16ba7db314667deffa78b1a301e3cbd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147318 Malicious code in resolvers-bellatrix-jsonp-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85843142028b8d29b219b1af7c43c167dc226099b6803ab77b73bedbb4a5f9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142462 Malicious code in figures-changelog-less-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee44249bd1a660b0083df22ffd0631e61301e444ab6d50034b7db2b6a70fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147987 Malicious code in slides-hydra-cordelia-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d6330753c3485dd0c3aea450f2bf3977f19c73564ecb88f67cce4605e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143544 Malicious code in impulse-fornax-mensa-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cab4005e2a8f44c24f49a725035d36143642544ece072d87ceedefd8127e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147981 Malicious code in sirius-transport-barnard-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f16b41c916fd05bc457611fe0cddd995304c32516ab4e4973479b1f96166143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142609 Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0da98e288028234148488a2f636cdb4fc065991d201ef07a51cd9f0f2ae7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140377 Malicious code in canopus-xanadu-markdownlint-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0db4becaf61d04f82a2b7159858b15dc737727a86bd0c3f376ed3aaaa44ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148464 Malicious code in taurus-castor-jasmine-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dfb0018bc45bfd3c2860fceb53ca07e74683afecd202d9deb97e51a929500f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139565 Malicious code in arcturus-bunyan-bunyan-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f10fba060e2756632195d0417b584f2e2c8a31996212806af09d16a4a929bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140522 Malicious code in celeste-rocket-nightwatch-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c1a7ce21f97d1a465c17c98b1da1fb0548bcc5ac605c81f2286030ac4390e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147293 Malicious code in request-event-antares-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450c77c16e7214dddfd423894d2688c8084da5ed5cd5285c01ccd574dca75de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147698 Malicious code in schema-semantic-release-andromeda-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce88cb97bfc01a7e523bca9e01648fdfffd90883d6f47bed44e84981cbe7afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-sqlite-module-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a89ea8c2f514e88e7093fd8bb889342fc05092b55d0102db020201dd5034ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146344 Malicious code in polaris-google-proxima-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4006ff9461391921d89545f31a28eb6b57e4c3a88fd6672ac61247b99137b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140103 Malicious code in bootstrap-fornax-miranda-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b002a965cbaac43533196a62f03eb1874cd008b25ff59bba86a86282f9f535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...