Malicious code in install-spinner-dagda-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143670 Malicious code in install-build-readable-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03e847818678280e92c3c6e82daa26f0b7e22d0fe3afb9b4d2a96f20cb04908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144860 Malicious code in mensa-process-nightwatch-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1f0262ed9e2a8e84f68ed2b67789ba79c7a2c3aa63a82cbebcf527775b5a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146754 Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ce0a0ece80a0f062e1bda693c998505ee43a150523b272c46e37cbd25f5383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145190 Malicious code in morgan-vuepress-corvus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14f3fb30811f382eb1461ef9900bbc9345ddd47477d39478075edb9e7c316e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142126 Malicious code in equinox-meissa-europa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971426dab5e1c8b4d75b97a1da56d0a5d22b1e299d60a76669042d42416a363e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144870 Malicious code in metalsmith-arcturus-chakra-ui-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e328f01f93a5d5887cc6910c54acc8b4c6ad9adc906fd77d0ea49a19e5caa52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149534 Malicious code in winston-wasat-gacrux-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d29e8042d28958d31f889469462bdfb23b076aa1e204eb5b69c1a441fb2ddff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140323 Malicious code in callback-webpack-halley-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a248511661d42b7e8a90d6b53620f06f00b4b181ee0d2c135f7ace1fe1b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142546 Malicious code in fomalhaut-lyra-public-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554f92f32e9f1975ef75e2126185f9e18aa72351820f046d97f9c6bfaefa4c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144226 Malicious code in kronos-sirius-process-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edc19892781e5698a861cfdaaf9cb484c281578a45fd8758876ddff8f2f484d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139419 Malicious code in antares-less-loader-middleware-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae569a3671d9274588de48ed5de8d667d2f2d636d898cc6832f261b42ef93686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139632 Malicious code in async-oberon-framework-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5717df4094340a3b32dc4b99bc68bf22c3d181bc748aa862add6b2fd0f2165f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148284 Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-centaurus-algol-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0716f67cbdc69220f2797ddf07dfd1a2d184b4a73e4c7c59e13a256a2af2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-stream-lyra-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91d6ed1a45350dc66c59200a558dfd1805694304dfb26a4721875c058d4b0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-dactyl-callisto-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1d8e20d18a49436dcee02fa175419ba3d128066b6ef56f3f7176a83d324d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-aether-thuban-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34926fe5717955e2b3719df604136815a0cd579c4e9b0a766baed82f8f5dbccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-tool-materialize-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880c386cf3345ba34aef43fcbad885305ac968c3ade923f78e7cbd093c693f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-carpo-xenos-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d435d055edbf91ca49fedb64f445e1a347374a30a36f392b0215d325440de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...