Malicious code in hapi-phenomic-cors-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f2c548eec7b1c2d839951c25a7b0a8543b92f3c4bcf2e77b2171ec7401b245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-venus-request-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc462fe9103b58a9790d8ba61541e5cf65aac60b590ef376a68f2f9a037f029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-mensa-meteor-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f170210e0d8eb08a7942ac60c145b1e1e5c1422ede04ad794da31b30e14df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-kaus-global-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699839cc245a757edbe4e1980aff3716ed5cbb4f51e2786662d90515c8014ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cluster-deneb-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6606800f76541e00a782f9c5c9f56d495b46fd423e3525710c8c3ad613f6270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148480 Malicious code in taurus-rocket-tailwindcss-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e807b35ff747380871af9c1a0c9c793ec19b44283a142ca5794a2dc3a8219c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140004 Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427e7143da6bb276367048b0c5b5503a017feeaf6621d126c4520ebf2085c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149367 Malicious code in webdriverio-electron-eris-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da77ab2059298b817155b92ac964758be6ef5076d9b7cf35ca406fb0edbc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141384 Malicious code in cygnus-subscription-sqlite-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e2511e9f9a27ff95e6c98e35f610b47432ec0f22b1470e637ebe6d56afe7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144562 Malicious code in loopback-sedna-vulcan-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e49376076f59d319a4d476b48a806f2b480af776828daf05d7824c7c6a124d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148173 Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147338 Malicious code in rest-altair-csrf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d12f9c3117cd64df99f3421c074d81f3494830740d567162b1decb6a9b9850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149193 Malicious code in vortex-vulcan-commitlint-config-angular-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488fcc3bef6ab42a047caf3a6e9d707eefc126e0dd734eaaaaa3ea53b5b917f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145073 Malicious code in mocha-dotenv-node-sass-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c4afa4aab8d95b10788ced224c58c848a4c18a6731fef0fa3aa671ea3161ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter-black-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494d97992e9aa1a2e3c7100dcc8f3bcd7e30ae20be5d70edfdfbe8640456e928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138658 Malicious code in difficult-orange-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fc563a5ee0e2921e72af685639641d7b9cba9eaab7f13272f44a1f68d4cd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kentang3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3b118111a9c71f59d5367296d6f0d5dfa46283c2f29d42e47e393a90eee66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...