Malicious code in cosmos-antares-avior-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617d6e5eff2b19a1a89297c4b75094e3aa4bde467ac80950ff66e9485eabcae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-react-bootstrap-phoenix-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd1f7f3c597a5a98d0f02b38ae7147c321a5db0e4ed178cf4dc828ff939ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-fornax-ophiuchus-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e14ba578f9389f96c9befb8dff2098b3c6d0e1be62aca0d7dfb57d570ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139164 Malicious code in acamar-arcturus-procyon-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f2f98ef09397343911706356e3ab2a57ef203f1bcd2117eaed211f0369b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139807 Malicious code in await-request-docusaurus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede9ef0a4df2943e87caf38702373e341c5980d77060c18526a2c85fe8f11c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140758 Malicious code in child-process-uninstall-mui-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0a4ab535415e7969122a4e850655975bffc86aac04bc53f23d054c1f9da397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146181 Malicious code in phoebe-sequelize-meissa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06e8e9f443fc6dbd135e27fdb0b50e6a3afc24eae0e4dca9d29dfd7357003b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145690 Malicious code in npm-server-mui-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c123fc1f820ef4f5e68ea945c2a2a7c074788b2210b979790dd54b81cc1d2ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148607 Malicious code in testcafe-unuk-weywot-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462eea52ecf8421c53bb7dc5ea4eb44ec9e279532735153b7c54f5e3e44e0bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144771 Malicious code in mdx-process-eleventy-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa0a62a0964cc170bacdb14d0ca2933b6ded18f5398907f0ca41ecd9326ca44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146292 Malicious code in pm2-apex-antd-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62bcde48ed9d8284f245a51dade1699959a6c5392b1c8ce1cf1f0aa82067f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147775 Malicious code in sedna-metalsmith-vulcan-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bb66a7b11e61ba0ffe2e0d0c433ef34fa0d555fc5381ee4c86e3f70147a06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140220 Malicious code in bulma-mysql-polaris-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642e49e59bbbe4ac10f5aa70b2452a7dbfe7d5a9928016d8a8fe291fbf43801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145145 Malicious code in mongoose-altair-carpo-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098ba0624983e816986795af3e5a8fbdfcc6ef8446ff26353af8a45c6ef0a8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140687 Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144377 Malicious code in library-init-flare-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146157 Malicious code in phoebe-lynx-less-loader-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b6e9c51d8df792487558370f33d75af46a24800c3767d05e9a4ab2115d7011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139748 Malicious code in auth0-gacrux-gatsby-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf6f8d747897cf96e7085bd279d14256a71b19de5530cb312399c232e7e9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144926 Malicious code in meteor-pulsar-prompts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea703e4ae5834db4e876cc760b1a58ec2cd07a7e560a94aa532b291a434dab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...