Malicious code in bootes-postgres-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-helios-metalsmith-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eb87ce92ab285b72ad75a25b3357183a98accf962cb853dcec26bebee2f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148963 Malicious code in uninstall-octans-procyon-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974400de422e2a3fb0d03cf40d45a0476bca83b458b272e5638ed90165ed00e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145053 Malicious code in miranda-repository-adonis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1603d4b742f0b3f24eeee1437a14a2801933ddc0b97820f8c2340a117e1eba1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147145 Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149127 Malicious code in venus-vuetify-regulus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e17cee68eb004e87c9a313b67a9f1a16ca7cd3689e90a42632fe0a3b8157b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148589 Malicious code in testcafe-centaurus-europa-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63cba83b8eaa4158a54bf908f388a4b53f35a21124e1a87f75a2f4834c212ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143053 Malicious code in grunt-astro-geckodriver-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1be0f2bf539ff1222567468e6365afcb79ff15bd5b2b4407cf0121b5d75024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149631 Malicious code in xanthus-middleware-sadr-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09af82f20b7a6de853595819e0521d588df0f7565fbf974821cc4b6309e5b000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145859 Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50aa2e0311402f756bc306bf743331b6111d2ad0a80567bb1f6b9af5c82adc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141100 Malicious code in cordelia-kastra-mui-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9153be71dd128015064d23635b4510d601f804fe1986f5a7a8af04062f75c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144608 Malicious code in lyra-grus-csv-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23074145049a720e304aacae238b9e6e91e6e85a207ebbd06a7a074a4f7fa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139459 Malicious code in antd-loglevel-sagitta-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74998325ae8c37749976304017144b18be96fb00d74ce19a8051c1a358bb1af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146377 Malicious code in polaris-writable-nova-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290e7f70c796def7185fa4a8d664bd0af8daa14ffdcd7d1cb949db022ff374f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142025 Malicious code in enceladus-cz-conventional-changelog-slides-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c0b08346bf9c56d0ce926bc8bcbe0c8fba7e8a52964cc09a4318f02e8cf27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142018 Malicious code in enceladus-alphard-tool-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141228 Malicious code in cressida-cygnus-commitlint-config-angular-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1141bebb30cede52e274e8085246ba2bf01af23cc1e83a43047a2bc8e1ad55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140068 Malicious code in blitz-zenith-flare-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5457b432b98f1a1c93c0545fcb9a402ec65ced668164a76265adace81149fbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146391 Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd5bb703b8e57411fa94222b918c4cd6f4d263eb9ae29e98c2aa60912ac969b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147605 Malicious code in sagitta-lyra-leda-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb780c8c954985b5ef0b82b4a8234f723923b792e3b06ab8a105705d67ef2d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...