Malicious code in perseus-triton-query-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fe942855422456b2b094db1bd45bdae5ec15bfecb41962f6257d1a0d834689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-terser-dactyl-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881621ec4d7106ed416450651d6195f7979fb834bddef57c7ba0760f7650fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-jabbah-private-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b8043e59a6d62401783728f39ae721c11121e22aee1c7fe10a37851fb697d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141878 Malicious code in elara-hermes-octans-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bd65c2d4862529c0b647b1f47ae5a455dd8490b38d4c68c7a3f582961826e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145953 Malicious code in parcel-carpo-cypress-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142088 Malicious code in envconfig-wasat-bootstrap-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6db8e4f65d41c200bf215e85d07bcac6f0968a2f588d5aa3bf006697614914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-thuban-child-process-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c69434b1c25dc4427b5759fbfb809886fd0b6b03c34ae3d2899345893727ae36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-standard-carina-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471054d89f05ad64142e36bdcf6b6929a903822f04b7332f97bedbe4bb1a7c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139715 Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-lacerta-procyon-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb5a8d1e08a2534b0e075c2a0e4d15900f30cf9a48a01004bdd020108ac0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140578 Malicious code in ceres-taurus-quasar-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7528419e46c0d12809177e0fa4d0f3c6134f6880835bed163f9c24fd3a11cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147200 Malicious code in relay-iota-sass-loader-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a389a6b76768156540f398eaf9dc128962f047b0d912d84b420daf6f715dca9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-leda-nashira-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d301d71e3f3f31fd91652777513e2b2a75170dce59fa2f3c8b068976afb993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-schema-dione-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af9e6c2b2b4d710d8a1f6df5d2630dad09faaf289798dc90e320c66da0f8106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-postcss-vega-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf154516a786f3129c492bc67fa03e6e5b0221b1aa910cac2e21fe03e5128c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143935 Malicious code in jest-solis-aldebaran-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46f2c78e342536e68a4c350a5c3dd11443b5b602f6fe14b57565716a0de7390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-despina-markdown-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4180b6a4826c11a8e0cd2c21acc90130fd2c3b5340cebf4dd04047aad34d46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145026 Malicious code in miranda-config-odin-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a68ff1ed630d807e3bbbabbe5a34ff698f471826af4bab49a10070e6b40639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-puppeteer-gacrux-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5322f7020a1f3604bfa09530366724aeb5e0f81e7f891d16090afe79b93494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142518 Malicious code in firebase-webdriver-manager-vega-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2331c563f4209ebffb0a5c8826e03fcc872d483903190d99b1729555388ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...