Malicious code in winston-html-webpack-plugin-hologram-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9afe8f4ab2829ba5b5196f1795f383340927d445f5df8c4dafeb0d41be9b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-xerxes-meissa-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63abf6534ea99f2d7edbd9fec922e534d5a525a6f21b8ba75ad9525c2a485d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-farout-module-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4192d7aeef77906c60bb34e7bc30349a3cf23117c8fc3d3afb6d6a2a96bae8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186214 Malicious code in comet-cassini-stratigraphy-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feec7987471c96c90eddc25903afa8981be14519613bb15253dde49d844b22ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-yaml-figures-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7740a3ced9536b2d669360d3d0007870b01aeebbcd11690bd66779cdad44da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185467 Malicious code in antares-jasmine-rocket-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4aee983d1436336ccf9ed5669ffc4797960cd6c4e50b1ef18c630a481685241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warn-spy-grep-compress-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adbd14c509a4b5f131c01428c8968f456dca5cbe03c08c476765d17541eb71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-ionosphere-parsec-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc3f9da4423ef958a565eaf87c9128d968bf1ebf01edc912b405a408b76df87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-pegasus-magnetosphere-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320e44886a156614cb8756afb54e4075fc58ed6bebbdd91f2cfd702bf93dd0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189410 Malicious code in sedna-enif-fusion-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412fab03b211814a517655b8de4f566125d1957ed1c54ed9b9db8e355e080803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186468 Malicious code in dagda-event-despina-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4af1dba9edd14b6b9639544b279b4ddc5e819a325e046b9aeb564916b7e249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187634 Malicious code in juno-ganymede-inquirer-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d0aa870f868241b4b5f4ffd22e9771e26f4a29e3ac8258e8c4b564d6c6c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186976 Malicious code in file-sed-hash-xi-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d86519311520ca1a35df7f45ec5ff5bce54178c9eebfc1939026100ef211d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-computing-ceres-robotics-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43790983c2a36d10db837113658aa6fbc391aeefe5c1b6a19d67ff207f4ce967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tau-upsilon-function-alpha-kernel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90193271ebae98b6977b41632875a580c5ca8ef7aaba725f10408347fa64fb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188397 Malicious code in odin-fetch-arcturus-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944cc38dea4fc36d654dc11a150cb42c931cbc0e0ca281f0140ac9026cc65516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick-serialize-small-bash-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83195472b40596bcbf33039302c5a9300ee72e68e9ab21557558e15d8f28a353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-module-module-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ff25afa3f90e1c8c9dcc12dbc8a9ac87666afec50cb83e076db197a2abac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190025 Malicious code in uglify-js-gravity-upgrade-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a40d3f6e3318ba9e54e62de53776b9b481eb965be138be7632328a3c7ffa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188722 Malicious code in pipe-orogeny-await-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2382b0c000b2e4514194f19d8259b7e578360d10c1531f70c0f8429921ac3b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...