Malicious code in antares-xenos-fornax-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36082075eac92799bc35bc96d11c348c8e7c0aab61e9f5a9c5d394fbc5d7821c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-dotenv-safe-sagitta-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2a9426c6344cc12dc0c13201ef225ffc7651bcf98aca5a8f8fc981a1464400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-vuetify-pulsar-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5c4b7e2c2de1ea070292038e89f90d1b8687fb1eb1ead236ee6a082436ce7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-server-jekyll-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae00849917075b7ff0a50029a91669d6550d116557fba279eb8d538fbe4ef6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-galaxy-postgres-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e258dc5e9b5fb277fc19f420f2898fcc42e171ed175cd5bb214e6b80bea57e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-convict-centaurus-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177cb7690e3257e51d0d35be4fdaf3f3035da7d9eb4de02ddd3373e58cb79f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-tethys-vortex-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e13c39b9392925f5d6ad9cf3dbc8489c406773998529d48a03bb729ae664295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-cassini-polaris-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ff216c374d413615fb651d407bd4c6cd67c42802a074e4c3d7da1df51cd208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149655 Malicious code in xenon-oberon-semantic-release-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0928c9c81d167db71db3f299e5566b1a13b3aee1d5842453431229e9ecbcf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140409 Malicious code in carina-eslint-plugin-async-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c48ce8ba7d435958b6830b6a8a7fe21a24780cd82d392645324548f91b988f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147041 Malicious code in rate-limiter-jwt-webdriver-mocha-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e04d7f7b551e7e6f9fdb1556df939ec9d20f1e327e2f91aab3dea5792b6d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146425 Malicious code in postcss-xanadu-test-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829bbcc100b6a0075043e2dbd7df90af59ab633374fca956c513e20a11fd2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148963 Malicious code in uninstall-octans-procyon-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974400de422e2a3fb0d03cf40d45a0476bca83b458b272e5638ed90165ed00e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140150 Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147681 Malicious code in sass-loader-package-sync-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213c0e72ea60961545ab67de0d5464389a77c618512fd25cfd5a60dca0a0660b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141228 Malicious code in cressida-cygnus-commitlint-config-angular-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1141bebb30cede52e274e8085246ba2bf01af23cc1e83a43047a2bc8e1ad55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146812 Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142026 Malicious code in enceladus-delphinus-spawn-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16313e0e5d3b079b00c95ac4307930310b408c15c6b1edc2f86d661ee9866a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...