Malicious code in ophiuchus-reveal-md-apollo-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4a00096a1a55cdd7d885bf74d3992ced5d4c3de15d37bacd0d478ad38d7151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-halley-run-script-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f9d77e7486f19b392694db7b12727b81676372ad5fac67df6db7cc8e333163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140397 Malicious code in capella-sails-barnard-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1d2cd92ef953315bbcbe9321c6e119ba90c15d656d1d9ba2daa51b3f89d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140391 Malicious code in capella-materialize-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828f4c6f5942d153f057f566c75da70af3062e70779dddf44195eea130f5f177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149138 Malicious code in version-janus-hyperion-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427704e8c1914d68ba387b56c941a250f60c48b69b5a5441fb65e0f26bbee07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143037 Malicious code in gridsome-dependencies-hugo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb118dfb512914757607f2581b601773b46370aa44eedf0fd97b506eeb430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145122 Malicious code in mongodb-csv-hexo-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e4d05be8e2ad6f4fced8582bc9c7f7ba53cfa26c1b58a82d20866775f2c102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-galaxy-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02934da1a26beaa527e0dc78a17b97871abc9faa5d6644b390f36b5ba820093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-duplex-upgrade-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea0537e1d4f6441625d140f225246350b2f419c999df9095d0aa0b6fdd48e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141716 Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141916 Malicious code in electron-fornax-quito-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca10652675c3d9394c71916ae5a4f8fdc35133680129358b10697e1f9f53871b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-impulse-galaxy-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862019025039512d743d8a22f192c01a4be212e4051f80ef7e9fd4891922d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143011 Malicious code in graphql-umbriel-enceladus-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95df253aa63bcd8287944401dcbc32701f552deeffcf87cb251266f1c84051c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-browserify-public-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d323d7c84f5115e992460072410129438f814ee9e3a999918e849edbe98e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-concurrently-library-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d58bd48897e3f098d0b7eb12450b06e34f0a9ad06264bac2b26370b02219c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-google-jekyll-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c36bb57993a230292f2d4450c4b90bdb8395d3b1cbf1ebed3aa4891a15e1baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...