Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149017 Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143066 Malicious code in grunt-leda-fomalhaut-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6439d544e62b4e9dda7e0c94d5d788ce0dd93b887af48316cc8e73c4f3c50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-stop-blitz-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8827208887d475e0e416b194ba336bf49e238e51cccf1d36e5c344c213c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-phoenix-prompts-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf63d6475ca1bed3cc695752f666b267fc1e3cd535f07dfd26419bfd634965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-json-sync-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7bdf49f9f526990d16fa5fe2b84526a9d322ab85095c3fe1b1c70438820902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145530 Malicious code in node-sass-cli-charon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e51d72c3d0f1f895665fca468290ffd1c71c1ffefce6a9d6d60b92d1e49c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146441 Malicious code in postgres-neptune-start-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e313b6f9d33429c95c9c1d346a82c5c092d01bd5405df768c5b3ce038bb232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148298 Malicious code in stop-magellan-uninstall-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4332253d3795a105d1a7b3111ec0d8148ac9825f77ce34c45ddce4f385d69aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144745 Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-aqua-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef45124ebfe627e5294f68bc4e9cb36806fe55be4c20289c8d2e2e1976c2311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126468 Malicious code in fauzi-getas46-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede07487b9e3f3d309a1134e1716afb9f15a72def87f02f1bd8978c784df63bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124842 Malicious code in adjacent_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029eaa86ae0ea2aa911cbb0a0bc68adc872125d6d36a1d48b3cb3b314e2d3020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120176 Malicious code in galih-keraktelor36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cceb4893c4c10b38dd6fed4a04e73fd0432a21582b211432707f0e21f65c02bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc9fa635cde02cde24641a974bcdbc18094c9d09b2e51b2cc5ec278e54bc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2320f2a6958647cc70e22d2e261e1bba51655b0a377ef9bfc9d2a9542cb090be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103619 Malicious code in healthy_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1769e9f5a5a1456987cce0272f639fa8e552651395c7085e03ad9ad17559f2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...