Malicious code in juno-child-process-izar-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884e74fd506fa1bc98cfbd4ce57585a43813d8be971e030658be9b01ea9b0e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140945 Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148530 Malicious code in terser-meteor-element-ui-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41505bb8f06c3abba6713e2918cde0849952204503e238e0d3620e4f58c5a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141006 Malicious code in concurrently-fusion-init-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a0dd14642fe214f74258e5f7c9daba2a84c171060af3d133f58a623b6e20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140720 Malicious code in charon-csv-development-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e003bff80fbb2c9adfc58b7b1d2c7c219da1fa8d285b269248e4b07db64caf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146723 Malicious code in proxima-mdx-hugo-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61776310ad21e449a4587721604572505e76234f8384ee96d1dcd2ce81c2a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143224 Malicious code in helios-achernar-postcss-loader-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa3bf1e9bab5bd6a52eb05ce85e1cd2626bc73ef8ab794ae82316c4d761497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143921 Malicious code in jest-electron-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afc2c02941b782a02116d029cc9e08d731431e5460f9652b303b188bbed9458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa72f918996786d3235c35e1d15645cdc1aba81c886ed26e2d88453654fca1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144309 Malicious code in less-cross-env-enif-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51f4bd1b642b2fde0f784e6728bc41be9488dea6352aa752a2e1ccd2f2f7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143958 Malicious code in jovian-proxima-dotenv-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6733db5f8deed25a8509ca2236434c17eb704c35183af720bcaca605fcabeb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144030 Malicious code in juno-loopback-tailwindcss-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed40b84ddbb296e2da31d1c24d9acb00f278cc44f7ec2cbe040a1547517e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149705 Malicious code in xerxes-foundation-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e106167988c40bc173f487701891303d610d3df571fc17138b7208a32f46b453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140564 Malicious code in ceres-eridanus-eslint-config-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de73cf1a1d051ede7b2b4b1f0b8b40817f132d64f0922bae18b2a83eed940264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139684 Malicious code in auriga-nightwatch-yakutsk-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35fa65ea2bd4d530b030637bffe1acb3dca16c267a6fd9f1f510158073ab3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147573 Malicious code in sadr-private-cache-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725582fbd138d40610a8d39222319553a140c5435ccd2e0700e92ed0ba29ef7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145955 Malicious code in parcel-colors-package-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8816a40a04fc78507feb370adc487c77333d15f2c73a6b91116e678b3fd138d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139392 Malicious code in antares-auth-thuban-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c3046a640463c0c5ad0bbe94e2f92ee4bb4bdc71323242d72796c0d5abed32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144907 Malicious code in meteor-despina-octans-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae65bf00ffa8318ec13c12d88ff9a10b09717907e583c9ad2ba69fee6708f1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140804 Malicious code in cli-node-config-eridanus-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c9e5f61f95bfcf4d2b38af3999e0c0645e84cb36f4d520d8df699b673e6970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...