Malicious code in farout-pm2-magellan-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f979d60e9f0321430741732ee1d0db5bcbeb4f5bea123aecf96de18fd502645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-atlas-cordelia-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe4c8839f981728634c7a122a4d6dd3c0fa6ec46fa24d71e759a5a59c609f888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-kronos-bootstrap-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a81b3ac18b5fbd08cbd211039271d5e92daac86cb75d3103fe9f2116ce1527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-got-cross-env-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff9bfacb88160eb86cdff05b33e80ccc35019431641ff471b088dbeb4ff399e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-sedna-scripts-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bdb28f054c1929b029e399dc3d9b390a88b551aaf485363df36d9f37a6da5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-semantic-release-auth-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451ce0fa860104f930018e5a6709dc067620d54129684d5bb8677aa14fe5a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-publish-nightwatch-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcca2c8af5be2035ff5c2b2d412451754bca41be038356ac20f6c88d7c175ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cz-conventional-changelog-aquarius-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c86bdafd407c357b4e5f009e701e69157cd73df2a754c63ee12fddba5576de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-xanadu-husky-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0e06559e846c241f796193a8640d2e67285bdd466e9b70508261a19b3cd9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139639 Malicious code in async-yonder-node-sass-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b951433d2aa9d6be0e893074510f1cdfccaeea107a57ae55eae5f9fb22f25b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147957 Malicious code in sirius-impulse-node-config-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90aec7674c1a5524fc2ea92edd26c3a9e2665afcaff60074fe96808a1fc7b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148079 Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142433 Malicious code in fetch-bellatrix-celeste-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9751a8f461ef75356eddf22513134bd4061a94b1facba3c6c921a8f816a09c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147728 Malicious code in scripts-concurrently-grunt-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90713be5a6b07f12ea3a0a3307259d9d4cca964d591bf7ce254508064f384e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145936 Malicious code in package-leda-regulus-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8f0689326fa30f2f33ca0e7b640cd54c8dba70d9fa36308272b06574817d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147282 Malicious code in repository-spinner-chakra-ui-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d6ff44adfbda00083afafb7a914f82cfde22c313e5d1f336400d9ce82b78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139379 Malicious code in andromeda-module-xanthus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8b6df485741e609f00a40fecab5f5f73c08f74cb8b2e4e20b97b222cce80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139727 Malicious code in auth-nightwatch-grunt-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fc8c622c7b8c84752409cab69a5ef77d9b69dec185ce3d8c15d43a4c58f751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144275 Malicious code in leda-jabbah-google-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5d69cde5ef8f2e71faae2ebf02639ed7e17058b5e0d56f3a0b45189637526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144397 Malicious code in link-async-global-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf9b45fa02a6e71ab581e7e6ce2fa292132a4030cd9f32985377b6f7eb975e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...