Malicious code in aether-procyon-corvus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8123898624474af520819d1c6b677e6d1936dc7da4b7636be947bb8d4405b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-dotenv-safe-andromeda-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30882c5333071e479bc604754a3f9a75c212b00c96cc28b0fce68ccf9133706d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-iota-avior-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842e087fcc43bac6c5e943ef3f5d979ffb2ba3d2ca75b0a413ad72b3d83f8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-redis-tethys-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7014fd80044159dc8d2679298a21283dd1126796586a383228bd0cf6fb2c52b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-nebula-eleventy-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3350d8234b18cf2b58fce52bc03f8b2ee6f0fd47967b05082b83950db3d1296c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-cache-nightwatch-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ef7e26646978c08aed8419135ce66e36763fd4296013810cb9b553b4a84fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149206 Malicious code in vuetify-delphinus-rigel-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92fadb7b85c2e89b10089a57a32deeafbd27adb0fc4983fa35668d33e523531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149864 Malicious code in zenobia-castor-mira-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cba6b21bfd9eeb8f71f56c95dd21cff743fcd6f03b604b4b41e6004f779cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141169 Malicious code in corvus-webdriver-manager-vulcan-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5135e94b844719cf58de133a7f391313a0e7400a94f34c8c5c86d4ec1814d2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-perseus-global-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca61a064c244c729ce59da09fd651affa69b1ca3d9dbdbf0f32887f5dadf1700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-orbit-inquirer-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1773b79bcf4920d77f7bc458da9b860ad326f4e1dc7734ad67764cf5102e36fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141656 Malicious code in docusaurus-cluster-alphard-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b84c12202454bd02ae202474f478a23b79dbfba994093185c385a0a8198c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141418 Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146268 Malicious code in pipe-rehype-browserify-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d69b84626d618a7dcbb56919d1de00304d16f4b5a4aa87afe877e114e520c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145533 Malicious code in node-sass-csv-nconf-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523cf84acb42076535525f5ee44480f13fc5d4564b1c0479f949ce1be4936ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140540 Malicious code in centaurus-arcturus-prettier-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04cd34978d0466f39ad12f91aa649f65f0e96d02b2fd1d6860accb169bc82db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...