Malicious code in spawn-kastra-got-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b681ac37012ca91d6377363d6e5a8296b01d4e42c7f49d917d4e368a0be7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-morgan-javascript-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667105714c7d9e1c524299dfa33797fcde0a423352f5c86fc8b866f4bcc72edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-enceladus-meteor-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f303dc4fc3654d2483f1bdbe2bbcd9922173b5307487abd9154297d5ce82c078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139426 Malicious code in antares-nuxtjs-xanadu-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f174f64eaf238a88acf650289df7e20113ffb2c14d336a40eefe4f53d6f3d4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144417 Malicious code in link-ora-gatsby-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2cbba5177f393474a7266a1fbf0f8ee23ba7cb420d9d2f5792a280484e1655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147233 Malicious code in release-it-quark-antd-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86314711951e058560cda1b445646d8c02da1a3a08066a8e8f749f38c1c95e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146223 Malicious code in pino-meissa-izar-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f4f35d77fd9a52a0e902f6c0cc3434a805974cf10624cc7cd084a5eecaf839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147735 Malicious code in scripts-loop-zephyr-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d858326367fb5a479f89e8a5c5167fcd21703e0e73a9fad660ddd332f1f78c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147074 Malicious code in react-bootstrap-sails-websockets-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f6d5f4858ab3c8a9dcd9c2ce14f334729ff48ad9207ef8a1e979a84de8d585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141938 Malicious code in elektra-blitz-development-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143136 Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142893 Malicious code in gemini-callisto-regulus-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9c15b620dc27ae7d09f0800168a33bee4e27d7024b3a940b2849bc637dc10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142722 Malicious code in fusion-arcturus-uglify-js-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcdbbe7e76603a0b829939b4894b608d87f4f1f8ec3bf93f24904bbd379212e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149874 Malicious code in zenobia-sedna-pino-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cecebe1d7af349a9854bf535f00bd7bbee219677acdff8be924b2303ecd00e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145879 Malicious code in ora-dotenv-safe-nodemon-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f5ae1a3c4741db4980aa3500c4358afd09c3b49bde668079c555bd0fe85862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146765 Malicious code in public-passport-event-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf8003ea6e13f7738d4e65e37de9cd73ca9fb6ca0cc7bb83f4a2ba932a3f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139914 Malicious code in barnard-neptune-celeste-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142251 Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145186 Malicious code in morgan-regulus-xenon-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b88c30f23ade6e1415484a7e9c1f68a5da86de1d452c1653f5cba3405c60358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...