Malicious code in karma-rimraf-start-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0eb4590aeef4e7b120c29ecc32f1bdc8b21fb1334cd127cfbdd283acfc43a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-buffer-uglify-js-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6228be0503c0333dded0d4c2cf95ac4fb6da09d2639f6c0abe9020cb4ea23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-luna-cassini-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bff5db309fc66bdcbce4dd897c9cf87a4b39740f19b7968ddf67e33dd7f4a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-hexo-subscription-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-hyperion-karma-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-kinetic-unuk-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b70ff36cf80e77a42f9caa4919b3fe8f4af9895acea4cb758c43cb9070404d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-subscription-loopback-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54c829d1cdf9ebb1940334926787c7630f40138d85bc15a6a2c84dc88a385f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147257 Malicious code in remark-venus-restart-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3326f88cef2bdfa35ca58e8d3f7ece379f1a199127012b9fe1a9672ae8089911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139871 Malicious code in babel-react-bootstrap-cache-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07bcd268303bb5427b2d483a7bc87f4715738e050d7414c8569c27ef5e1245c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142828 Malicious code in ganymede-winston-enif-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5f05b3b4884fda91ed4e5b87e250c8d1fd333f9772b5f001db3a8ff25f07b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142212 Malicious code in eslint-config-thuban-repository-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c074994c161bdf7cb79253e0cc659149af99d893068ef5bab57b54a45a15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147212 Malicious code in relay-wezen-procyon-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82056215e83fbf50098a0c0cd3af13d16c18accb98e2b5be855c8327e02798a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146713 Malicious code in proxima-eslint-plugin-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bff0b2371c9718a62b45c8b461c87c10eace4b9cd803171ec8c16ce0a8aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142468 Malicious code in figures-halley-cygnus-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145013 Malicious code in mira-perseus-delphinus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370b99d13baa843ec3e6b05367062a9a8f526f0778000ba19ff3e22729a31288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148478 Malicious code in taurus-release-it-sadr-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ff411da84f3751381a5af5ff44c207ce3708e666554d56c0838d8ba1d25764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148082 Malicious code in solis-polaris-playwright-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e983822d8b03a418bd8a85ce536d41b0df53160f182584fde4cf5e0a104f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146542 Malicious code in private-semantic-ui-lynx-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55cb72d41d91df53f77987fff3f52958a85e6b1d5444c05279e445ce2e4b1e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...