Malicious code in release-it-hyperion-firebase-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff47bde40d4fea6ade9236b48be53f4048388469d990e0c3e1a83cd0ddcdf0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-element-ui-uninstall-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c9482de78b8db351be096255e8d470475ac1af6f9f421925c5db2d0e149ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-meteor-slides-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb4bd29b5702676310ac558508cd9e3ada75cc965d0b2dc1edaa13c4b45b699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-pegasus-nightwatch-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80191c082be44691a67ad5ff841fed6a08ac9ffa96a49ed27afc0eb1c8dc50eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141020 Malicious code in config-commitlint-config-angular-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142865 Malicious code in geckodriver-hexo-node-config-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9530b02e469e54b49153909a3ee6445e77fd868b15f80e7d9f35f3492765f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144047 Malicious code in jupiter-altair-sagitta-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2cbf7ce2f61cd396dd92768cf8f3c8b83ebd104b8aa54aac8d1ae5356dca391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148599 Malicious code in testcafe-ophiuchus-xo-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21214842cd4cf23c4aed99f5eb4277c186325847a0fc2aab7e2c03f867aecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139883 Malicious code in backend-configstore-ultra-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3f101f40a801f8e4c2f3629648799481e226d2d379a8ff859c31cc54d24cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149726 Malicious code in xerxes-yaml-ini-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ded0ab57406dd6b25eed7c5ecfac3f5c9075e59f938608e40d47ab3b68cb6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148676 Malicious code in titan-cluster-yakutsk-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab45250d9d40c0388aebade6b47a021c64a31a23329c3bc89a86aa9242321f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139515 Malicious code in apollo-hapi-soap-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b11768cae9dce591b19f0b3aed2b0ce4d5df76c62962d608ab48fae2fe65d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141241 Malicious code in cressida-repository-mutation-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b893e5d04b7484d3c28cf6b43aa463dc842703409964fa8d83ffa865a9bbcc10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144880 Malicious code in metalsmith-janus-solis-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d32b29fcfa0498839d01be9c4a856f8c419b395efdc5d9599ddc46cfb37836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142654 Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141042 Malicious code in config-umbriel-tailwindcss-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b504ad2784be5eabf4f348d8bacc2bca3fca7f160530f9e1132f55d1142e1d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-supervisor-zenobia-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50daf5591e2972fde227a78418365d4f057660287ba31db763855088858763ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-koa-passport-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0618017da8555c11693d63a92fb08bd79ee8b5a12fa2199727a8fbca59b2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-nebula-sequelize-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0094de2b5d9b566517b29185064674e61f7198e886fd9ff5e9bedf51bd2d6f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...