Malicious code in jabbah-spica-corvus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b77122a85467dcbf77034e0ca197862dd07c0ed4a66331a6fb2372a7250c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-regulus-xerxes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14a1f44c2f7c4f15e67c01fa676fe8a3e69cddd184659b61b87deb61de9a5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-buffer-sirius-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b52588d74bb90999914f87139a9d767c0c09748794ac5b8677d02a3e90b2a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-enif-gridsome-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb39d8e6ecbba968ccf3078cdaee4dc1337a58a7ffa64e62d214da2649c403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142920 Malicious code in gemini-wolf-subscription-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac34b37db8f5230563ed1d7c9aca5ba4992c6274148ebc27c70174dcc389fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139211 Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148284 Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145941 Malicious code in package-perseus-weywot-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c0da3948896e0aeaffec2860a96f542c0f37b09b504217c4ebc4ab8620d806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146622 Malicious code in procyon-update-nestjs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706afd176ee6df8e6faa2ae433810bc6eea5e2fa845c2dcc19eb0868e4602449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145164 Malicious code in mongoose-request-remark-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ad925a35d3714797dcfe7689f896c316ad0a759ebe0b1e33a12b68b6384700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148671 Malicious code in titan-auth-websockets-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433a1f1238fa18babfb7cdb34edd93e4b23abddb489dead658c27f8f3aec0a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141812 Malicious code in duplex-jekyll-janus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5d9eef64606b70b321ce6c4a064af57dcc5d305c662934213156fc9a822c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144217 Malicious code in kronos-fornax-terser-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8362755930a3cf4a26b1bc94e15abf929162cddfd7dca4381c2381381116dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141249 Malicious code in cross-env-betelgeuse-pm2-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a127b38dc2df9361abb4033f5f1d96762668df04c6aaaf121099671b7d19dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142522 Malicious code in flare-carpo-server-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3e65bef83798c5681727ab59647810e76221c13e4cf6fbe8a12608241c6f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147964 Malicious code in sirius-optimize-css-assets-webpack-plugin-auth-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8382ca6a8e541e292bab6da68d987f95fc70200f8bf3bcd136415f68699d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139903 Malicious code in barnard-commitlint-hermes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8004b6ca73f38ad76ad7c7d80bf57deecfafcba1ecb618d13d4776d066d13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147986 Malicious code in slides-graphql-markdown-pdf-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875d6758d07bb506554c8efb933ea288df266b933847f0fdb34e06da7e69b3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140367 Malicious code in canopus-pavo-hexo-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d77c16cfe035d1cc74ef7053e6225e19ecdf37cd246eb80bf80ddb645f4ecc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...