Malicious code in enif-cosmos-soap-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe0f54fbc6915846fb2b13a32feffed132c1645ae6588717350c5848deb52a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-kastra-fomalhaut-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eef0a934d73d0ead1f154332245499d61fc033a2baefceef76b244aca28fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-eslint-plugin-async-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c48ce8ba7d435958b6830b6a8a7fe21a24780cd82d392645324548f91b988f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-google-venus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdd3ca350cc2d89867e35e9712945365651243ee77bbb151092965b2539e17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-warp-mongodb-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06ae7d6ff6aabf0154b5632ee77933718e1f2d084a2c285b9fb72e9b2dcdbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-gridsome-vega-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ae7c566eab25bc74e5af7d016f797ca509921a1608b9aa315acc4ac93808f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-izar-kastra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328a62d2bcdce3b83d55aaaba84a4dc4cdaf49d7d16d020310bc18f9c6672de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141811 Malicious code in duplex-hyperion-arcturus-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b037a874f79cf6d1ee2fa384ac6fa8c11315b800a55c5ecfd7b9bc38dad0702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144569 Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145617 Malicious code in non-blocking-norma-canopus-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7ca16ed66cf2ed36a524370a1684dfe876fd9423dfcfaa9cba377e1579bc38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143699 Malicious code in io-hercules-css-loader-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4730c20c72ed848b64de81d147fe71e37b657dd950372600a60273d31a4f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139778 Malicious code in avior-ophiuchus-achernar-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd34c176b61d18d2d2a77dba4d88f6eb6df7acf0d470be7dc7463628e0a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149387 Malicious code in webpack-andromeda-axios-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d7d8baca28556fd3dd98032288246232de178e0815872d5dda419932b7574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140475 Malicious code in cassini-repository-miranda-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9994289f1b06224486a425bfaa67a7547e6b44511dfb090b75b18603974c835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148200 Malicious code in spinner-jabbah-dotenv-safe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8a3cff783e8ce4ca144f5365873cb4fe15073ac53fe9fa26f546b053cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144279 Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148910 Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139431 Malicious code in antares-phenomic-process-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a73308f60ba615f3627d57d87db5205c9f4eba95159507cd9f0fe02e687f95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148756 Malicious code in tool-terser-avior-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e7250d997601bf9650f92fb361f0b19215ebb038518c5ff63a958a9eb4dca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...