Malicious code in jovian-native-google-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18c92729ce788c0306a566215970143f0eef297f78f5ca7f805ea1ab316e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-middleware-non-blocking-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0911c18dba18f41ddc05e9ca6f4eb53d1a1290db69de8d120a48d8b7b16b0d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-prompts-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dda1fab30f9cdb224c6c52023b756f44b91b0d21d4e6f6436b9b8fe36f7b7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e3f7240ef57a19ea49cf786e8efb14f2c281c3f4efbe67cc4d3d2fde40fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147233 Malicious code in release-it-quark-antd-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86314711951e058560cda1b445646d8c02da1a3a08066a8e8f749f38c1c95e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144417 Malicious code in link-ora-gatsby-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2cbba5177f393474a7266a1fbf0f8ee23ba7cb420d9d2f5792a280484e1655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146765 Malicious code in public-passport-event-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf8003ea6e13f7738d4e65e37de9cd73ca9fb6ca0cc7bb83f4a2ba932a3f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142722 Malicious code in fusion-arcturus-uglify-js-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcdbbe7e76603a0b829939b4894b608d87f4f1f8ec3bf93f24904bbd379212e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146223 Malicious code in pino-meissa-izar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f4f35d77fd9a52a0e902f6c0cc3434a805974cf10624cc7cd084a5eecaf839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-enceladus-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f303dc4fc3654d2483f1bdbe2bbcd9922173b5307487abd9154297d5ce82c078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139914 Malicious code in barnard-neptune-celeste-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142091 Malicious code in epimetheus-betelgeuse-toml-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac2853f1e0cb19851812839610ae7bf708341ec62a217a1006c8db7e958a9ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146489 Malicious code in prettier-plugin-markdown-nashira-vega-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d6f3c74a6835db2836c93f81166e871a28ac1ffce6ebd2fe4ec78ce526c638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139426 Malicious code in antares-nuxtjs-xanadu-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f174f64eaf238a88acf650289df7e20113ffb2c14d336a40eefe4f53d6f3d4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142251 Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145186 Malicious code in morgan-regulus-xenon-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88c30f23ade6e1415484a7e9c1f68a5da86de1d452c1653f5cba3405c60358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-chalk-rate-limiter-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bbf56c33e1c969c874d1a9534c05a591a456bf9708031149daceb8627a3044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-nebula-cordelia-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fd084dd542b21def1987eedf23c9ecc771d99ce6b923f8b0c800a2d77ac8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...