Malicious code in warp-ursa-kastra-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b98d11f27a0a6ade7b53275ff1860902cdfd84ce6a16f09337ebb7895eb0160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-bunyan-centaurus-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7041aeb6d4b6daae8b199986a9b05f5f12ff05ec198d264fea5a5274b2a9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-phoebe-framework-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a52a262bdae65b6e905fb0373e0ed131f6cfa80de9df825df7c8e829f50809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-dactyl-callisto-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1d8e20d18a49436dcee02fa175419ba3d128066b6ef56f3f7176a83d324d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-sagitta-public-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b92c8880fb2cbef96c09b19470435e7b296ca92542ccb4e844977721d142592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-babel-reveal-md-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67889195d0a7f7faa9b2471bc984c3cbdd40d26c513a65cd5481a6b7f005596c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-centaurus-algol-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0716f67cbdc69220f2797ddf07dfd1a2d184b4a73e4c7c59e13a256a2af2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-umbriel-hexo-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d009dee3dfc15d5c2b97f41e178224d0f0c01bd4a77c68c903623372d3206c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-loglevel-ariel-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8400d28101f9e8945eeecd6bc1b83b5ef1c31064aba6739eb69b2bd2223d4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-iota-arcturus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f839cfe04ad72874d7b402390537f828a683c05b13808b40b85a5f1c366945c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-meteor-centauri-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa3663d895433f1033c78c51ac79a941109265b8339154bfc256c6dc6d5abfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-dactyl-nightmare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25eb547f2c0710a4ca734107b39b3538297761f961c0a01fdf10bf7fd50975a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-colors-update-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847798a82aa947d6f56ab6201b37c9bb6fd5b2e9a8f27f39d89c287bb9059747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4b690231e8993be588436a23517703f8f8c1099c2280e2dc9aed2d0c9b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139655 Malicious code in atlas-radiant-sirius-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693785909b6a2f6ec0efded6f239ca9b5178f141954c0652b3b1996fdf9303b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148776 Malicious code in transform-uninstall-octans-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f86db654307c7cfc379ac92f24a6d4c504fbc65b67b3f390aba1f04cdec2819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146541 Malicious code in private-readable-quantum-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d8a82e61512f1a6df2bf946c62cb03f61f7c4af249332fcdbef2b6f9f19af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148826 Malicious code in triton-radiant-lynx-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7121cea280f69ec28b05823531126fbded5800410379d2b89f4942fd981ba2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144848 Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...