Malicious code in aquarius-phoenix-prompts-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf63d6475ca1bed3cc695752f666b267fc1e3cd535f07dfd26419bfd634965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149017 Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148298 Malicious code in stop-magellan-uninstall-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4332253d3795a105d1a7b3111ec0d8148ac9825f77ce34c45ddce4f385d69aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144745 Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-stop-blitz-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8827208887d475e0e416b194ba336bf49e238e51cccf1d36e5c344c213c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-eridanus-mini-css-extract-plugin-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dd92d5c4317fec64cd19f404a9cbdad63da59f547233ebd3a85c23c0e9527d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143066 Malicious code in grunt-leda-fomalhaut-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6439d544e62b4e9dda7e0c94d5d788ce0dd93b887af48316cc8e73c4f3c50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146441 Malicious code in postgres-neptune-start-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e313b6f9d33429c95c9c1d346a82c5c092d01bd5405df768c5b3ce038bb232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-pulsar-config-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6165b6024805b3adc5e2199016ba077ca2901335befbde30b4f24903628994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-castor-supervisor-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6703a774604ef0118aa7cf65f49695e8ece02b09f3b0d64acd5ba68d0a611c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-aqua-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef45124ebfe627e5294f68bc4e9cb36806fe55be4c20289c8d2e2e1976c2311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126468 Malicious code in fauzi-getas46-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede07487b9e3f3d309a1134e1716afb9f15a72def87f02f1bd8978c784df63bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124842 Malicious code in adjacent_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029eaa86ae0ea2aa911cbb0a0bc68adc872125d6d36a1d48b3cb3b314e2d3020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2320f2a6958647cc70e22d2e261e1bba51655b0a377ef9bfc9d2a9542cb090be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120176 Malicious code in galih-keraktelor36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cceb4893c4c10b38dd6fed4a04e73fd0432a21582b211432707f0e21f65c02bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc9fa635cde02cde24641a974bcdbc18094c9d09b2e51b2cc5ec278e54bc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103619 Malicious code in healthy_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1769e9f5a5a1456987cce0272f639fa8e552651395c7085e03ad9ad17559f2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100605 Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...