Malicious code in less-json-sync-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7bdf49f9f526990d16fa5fe2b84526a9d322ab85095c3fe1b1c70438820902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-stop-blitz-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8827208887d475e0e416b194ba336bf49e238e51cccf1d36e5c344c213c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-eridanus-mini-css-extract-plugin-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dd92d5c4317fec64cd19f404a9cbdad63da59f547233ebd3a85c23c0e9527d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-dependencies-transport-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2d815a4e59b1e9af12dc14986473fddc308775a2b32f5d80b55972e49c4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144745 Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145530 Malicious code in node-sass-cli-charon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e51d72c3d0f1f895665fca468290ffd1c71c1ffefce6a9d6d60b92d1e49c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148298 Malicious code in stop-magellan-uninstall-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4332253d3795a105d1a7b3111ec0d8148ac9825f77ce34c45ddce4f385d69aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149017 Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small-aqua-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef45124ebfe627e5294f68bc4e9cb36806fe55be4c20289c8d2e2e1976c2311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124842 Malicious code in adjacent_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029eaa86ae0ea2aa911cbb0a0bc68adc872125d6d36a1d48b3cb3b314e2d3020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126468 Malicious code in fauzi-getas46-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede07487b9e3f3d309a1134e1716afb9f15a72def87f02f1bd8978c784df63bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc9fa635cde02cde24641a974bcdbc18094c9d09b2e51b2cc5ec278e54bc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2320f2a6958647cc70e22d2e261e1bba51655b0a377ef9bfc9d2a9542cb090be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120176 Malicious code in galih-keraktelor36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cceb4893c4c10b38dd6fed4a04e73fd0432a21582b211432707f0e21f65c02bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103619 Malicious code in healthy_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1769e9f5a5a1456987cce0272f639fa8e552651395c7085e03ad9ad17559f2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100605 Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...