Malicious code in csrf-nconf-halley-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99eeea22776023a893b8e4b2d65a89134787e4071cffb487c1afea58bac1525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-xenon-arcturus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5240b3ede1f9201b1acc524faa01c01e3c11b02638005b3793905ffd25a4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-redis-blaze-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123d7df57f85e63604cd82ab25264af4dacd702f6546c2050e0bccf0d052bc18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-alphard-farout-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd20586f322a194db4c9b71f1e67da30870a5aa8e1a59c3861af98d3115e87c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-configstore-kronos-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6152d31759998ec7f7ff0c7f7625b2df797123c6f92b91550da3d5be8bc0cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-google-jekyll-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c36bb57993a230292f2d4450c4b90bdb8395d3b1cbf1ebed3aa4891a15e1baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141916 Malicious code in electron-fornax-quito-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca10652675c3d9394c71916ae5a4f8fdc35133680129358b10697e1f9f53871b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147759 Malicious code in sedna-centaurus-algol-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0716f67cbdc69220f2797ddf07dfd1a2d184b4a73e4c7c59e13a256a2af2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140654 Malicious code in chalk-run-script-prompts-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ea2258006845312d46ca56f78e72c5ffbae2d7e22d59b5775e81b258d8558c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147574 Malicious code in sadr-process-ini-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e99699493d67b9e69638403e5ff42e8bcb51dde5d15221340e4921f8cdf49a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140541 Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140357 Malicious code in canopus-ceres-start-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6cf436c849d3590009c01fd3be1f2292f845175f0191375f358643d24f99d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148845 Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149344 Malicious code in webdriver-mocha-chakra-ui-neptune-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bae6e1365b5dc4da2b0ae42bd53023871dadfd16a3dbbf6c55fad3f62f4e8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146478 Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1a8c727ac3b13bfebcaf88f918fb328f6db6db6c868976d5d5db78df819ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144832 Malicious code in meissa-semantic-ui-javascript-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b22af8d1e581000784e2dabcaa9430a24b2c5e18069e1425b09bb18d86a7206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146871 Malicious code in pyxis-charon-neptune-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556ddeb88bf7a9fddf1bae3466a20bdfd45f4c606551a5622a2d5157c1b8e689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142320 Malicious code in event-prettier-plugin-markdown-halley-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd30929afe52bc277b4d8b06cd079e5fbc315319642889508b0c4575f162821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148286 Malicious code in stop-aquarius-barnard-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c424cf28debce1410577b469e5847a0ac3aa9b77d2504b807a03608e3d501ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141393 Malicious code in cypress-blitz-typeorm-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fd9a3511b91a8ee654005a6e729410f36be69ce140d11fcd0dc6ebdc400290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...