Malicious code in hyperion-express-levels-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90de39791303e3f40652d0174daef89cc814105d6bc42e8c7cdf7d0e96351cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-gacrux-spinner-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5bd7d021d0618ff959e97f2e7177acb117b004546315750d5c856ddc4ea235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-levels-winston-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf00a98772a23d0acdf2e0f571ae86e7537587f184063460e54cbff80f48f446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-aldebaran-sedna-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a1fe9878670df93aeeee8558080834f4d1995474c5ec713b4b52e1e76c27c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-jwt-uninstall-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5a60826ce2dae0b128158911da5fd082c31135b1f850b0e1134ec983ed2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-solis-promise-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3c59989ecc8eae4a83da38af7837d57dde9a10c501c636c5a57588afabd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-perseus-lyra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e87733bd5fd700c182b2fe085a507461f9325ca6dc4644112ee05a9b4d5f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-sirius-rocket-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b239720987b2244288b57886086568311f5253ddb8d036fa28b57d806bdb167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-lint-kastra-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa350b2d4c3c265a386f4cd6b20c20ca0c9bee2e2e106102119c79f0b582dcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147732 Malicious code in scripts-foundation-resolvers-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bbce27bec68a8aea224727202223aabb0cbbb29433c1d00dc58f3a48262bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143257 Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147806 Malicious code in selenium-mensa-xo-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35fecc8fad9cbba384f0222c2b9cbf21220083ecd5a1a258e3cd02eae7a83b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147204 Malicious code in relay-mocha-mutation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86765ad1d4909a393eb1d62de286cacd7f00f07a84862e0f6f275d9553d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148085 Malicious code in solis-sedna-loopback-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557dc7a79fcec22550edb2484b4642de358e3bcb886a741c248d597a992bb19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146800 Malicious code in publish-phenomic-phenomic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a89ad163831682a4f9c393633188ef89b0371d75e58767e815d7e03d8bec4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146259 Malicious code in pipe-await-got-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40e789ccbb5f530142799e6b4432dd8fbdcb5229c1554268b72c421195642d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141314 Malicious code in css-loader-relay-element-ui-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3a2b6b8eb1dcee62835621683bfa4bac6dc855bdb77725f0cb058fccaf4ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146172 Malicious code in phoebe-prompts-hercules-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a51660212c8f8e17ba061c5d3c1287bece955ade4374abc8c6d27c3156ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146822 Malicious code in publish-webpack-configstore-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa837eb1c0466d00c69e8afd0e42d09c3bab5399f484e35f736cde5231a9dbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146085 Malicious code in perseus-express-playwright-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb17399521f39eec5d3c3f8c312bb8e5218debe3c4ad158eecd500a1806e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...