Malicious code in run-script-yakutsk-halley-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a58c1f464fea877a39af969ad6aba5cf99dafdd0dce3a22da490775de5e301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-writable-nova-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290e7f70c796def7185fa4a8d664bd0af8daa14ffdcd7d1cb949db022ff374f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-terser-dactyl-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881621ec4d7106ed416450651d6195f7979fb834bddef57c7ba0760f7650fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147377 Malicious code in restart-cordelia-equinox-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46b1389b18bb4e7ee0154c9924cc3898400341116f0121ad1e814fb7128204c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144671 Malicious code in magellan-uninstall-centaurus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ad5306a1123b19371e6791f190ffcd8958f9c820d5414582fdb3cfb0d7088b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140224 Malicious code in bulma-phoebe-zenith-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081a2ffc47999af7e0aae30f3d30a70747df95d6552443550b349698fd6932d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148370 Malicious code in subscription-zephyr-exec-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbac9979b36ef95fcff39ec01aef5c14b6ecd56f1a9563841cc72f03bd25f21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144660 Malicious code in magellan-rocket-chariklo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e00035575eab423ae3e4685949b497d9cc3dff7e8691dc1a9cb608ab0565d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139314 Malicious code in algol-weywot-loopback-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd08628b45393534c9b47e2519a7da83ebb972c2cc11e5dac1fea6ec5abcf16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-thuban-child-process-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69434b1c25dc4427b5759fbfb809886fd0b6b03c34ae3d2899345893727ae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-elara-galaxy-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143667 Malicious code in install-aquarius-jasmine-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21ab829ea85354ff304d31cce53fd77f2a6211441349ac39f4443d4f712a164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149223 Malicious code in vulcan-adonis-pino-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33067afa4c87ec451b549c0adead53a11a63aafb595a5134d16c9db2b554fc15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-hydra-ganymede-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 578271e4a2842f9d3d7fc522390747a7f8ce630f19adc23dd9b8da8e7bfe041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-xml-meteor-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ba59caf9664dc3a61a37f877d63dc27690e7dab0c4b69f50b12223c83139ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-vortex-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38ac0ee46954d7b993079acbf423ca421753c5b7c1f34ee247e3328be09c172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-ganymede-nodejs-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd879ab632f0dd68339b7adf07134b5953b4df890f07de2df9bb6408002bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-farout-xenos-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c56a819dfc4ca3025766300e1e0f6e332ed03966fc9003cb4980e080f0a8f2b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...