Malicious code in gemini-indus-chai-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a640f3907673006d43312fd214e58ae21c5fce51c501635b7586b270b94c1416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-bellatrix-backend-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ab935a68be6a70f7ba6e91ca1a630274d8ffea77cffed2afddc09aacf072dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-castor-rate-limiter-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b8d5eadb862ab0380ce00e88203c061c6c85618af21748e2e962dd1ef25b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-europa-xerxes-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b016074ca2bf81d31113e17620b1a0ae9d8d9e1abef97cc8f872badf16e6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-colors-xerxes-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab249f4b1186df6b683ff0bb6ef3da1840b0d65c1ff48b33fef2e5d9cec0feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-delphinus-odin-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d12de1692a296b43888026ae5f4cf6d26cb58c03051a26680bde2d2a9829708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-webdriverio-husky-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5148b0a76281c79123cbe77e4c2e9157b06d62345dc817344997543ac5c6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-halley-nodejs-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a15a54cc1eb0ce2d148b3ff7677e250f4387a0900f4a6bdb4e0858a664f377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-yakutsk-juno-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7d8857f1269646d020d61a230349856e619bec10f9307c2ab5843d8f509f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140268 Malicious code in cache-chariklo-gatsby-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922d2552b4fc45a9980f353493ad012a5579a62b6fea2ec12c4de27f6169c5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141169 Malicious code in corvus-webdriver-manager-vulcan-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5135e94b844719cf58de133a7f391313a0e7400a94f34c8c5c86d4ec1814d2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-charon-rigel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b81c14674542e9356c3817bc7e5d57607720d23252ff3006a97b314cf0b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-wasat-octans-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd37a599738ca614b0f898d028c4734a08455a66fdabfb731354e0ffa6ecab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-corvus-enif-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e241e8e58df7e4e881758896c71bbf5f061b413610ef47186c207cc5ed6f30e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139289 Malicious code in algol-aurora-uninstall-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e26acb818d7d6462dc6b7af9a975034aae6a01486b28b5de249c943e90eee21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148209 Malicious code in spinner-semantic-release-nuxtjs-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa28620704ac1e40b252b62fbe8f07a19da9efed84bbee91a1c72c9e07efe29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147742 Malicious code in scripts-pino-event-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128e90a0f35a135ee0249d752b33a18aaea7dba4c4b0e42facd5a5fc7438b978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139786 Malicious code in avior-solis-grus-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1bdfdc7bb97c3e6f4552241ddd6ae1a7be05ef2b820b1547391c9765a70c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...