Malicious code in google-juno-toml-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95295e519e35ecd2d623f7afac167f03d8dfb51ce411cbc4ef9c11a77bf1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-transport-yildun-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3f0c5ca2acfee1382cd58e3ab88f5ca02c19f4b4e3351703b06dfafa6db26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-yakutsk-library-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10cc955078d2d189443442f8b28c1372e8bb5fdb1f7c9bd068b7f834de3731e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-barnard-pino-pretty-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbea876bd00d52fa399c8b70c6e1edece224f60860cb91de7f0eeba45b7c7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-procyon-promise-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd32db1e172bcaef32471225d0238324fae546aac899d0d778a7be7bbea29aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-magellan-magellan-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b780c70358071a961c42362e095ee5b272314df1a7a99c400575946abdf7772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-gulp-cordelia-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a395ae24f7d0c1eadb39257cc219205772046202a800ef8390ac3a07011e0a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-miranda-dotenv-safe-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73dd1872b3e269f4b331b970aca3c627ad7c61d11d09326df0885d88c3820a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-prettier-stylelint-fomalhaut-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ac29fca3ac3709645dfc3f811b8445f16d912d8a52b86c2ff781007970a518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-sedna-global-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1925af83c70212670bf7bfea9259d1d270a1615b24c36b148d269633e7446d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-node-sass-fork-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563b15c57dbd0d8f2aa9a0c5dac2700b4399d40d423efe59eb7f8dfcbf879699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-jekyll-deneb-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed157d56fb67e98deba99a6d5281c9515fa8d59b328ad7646dd64e7fffe9aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-proxima-link-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63188598f74497a2c47b3cde3e375a0268745c99100ec6cefb8ee6a96c36a71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-arcturus-procyon-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f2f98ef09397343911706356e3ab2a57ef203f1bcd2117eaed211f0369b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-nightmare-lynx-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf9b9a4d323551112c1b97a4bf77dd72a6a18b3f8deda45f95f89e1e48f6f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140313 Malicious code in callback-reveal-md-xml-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062776b53bb3877cbe015a14b0db5d1ec251ea399b6436a8d9fff98c0df7eade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139903 Malicious code in barnard-commitlint-hermes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8004b6ca73f38ad76ad7c7d80bf57deecfafcba1ecb618d13d4776d066d13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145373 Malicious code in neptune-phoebe-octans-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f9f502b1d59b7d8c24fb7e93794207cda5d02230b9215234bcf41b07283d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141054 Malicious code in configstore-graphql-pm2-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df4450f2fb42c74059bdf2515b13d9ec227be42735da764c21f0c090c58f9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...