Malicious code in fornax-octans-grunt-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b602d370f1083a15d9a1ec3d3af5636eadc38249b8279136e2dfa493a1c039a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-kronos-aurora-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02998f5866080f53cd6472b39a98ec84ad72333e9427068bd1785888188c3216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-eslint-plugin-postcss-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0531401803a4a5dc24d00495ddce8dbcfa848942851ec09e9616e99dce22824c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-xenos-semantic-release-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f58e029f14585cfdc2fd0f9b661cde86502c305c7822ec44d6a8b06181e028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0b021a09de30d4b323ddd5aae4aff53aaf7dca04abdda73e5418cbb0514921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-heka-miranda-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1fa0070a7b54d9426e52227a9e3f7dc92ed67265f0518bd45fefc50d15b0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-reveal-md-apollo-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4a00096a1a55cdd7d885bf74d3992ced5d4c3de15d37bacd0d478ad38d7151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-nightwatch-aquarius-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a16ba622475028f46340ba10cf929865e0a4cb88b18410fd926a9315ccf622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-epimetheus-dynamo-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478efc3b4b38da17d0d9e7f57a3b8184ba903e348c6c29973c0d063a315656c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-prompts-webdriver-mocha-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe2d138e30dcee8ced95d5d531d2a68c932e8f629abbd4f8a4be48c7e1f521e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-elara-yonder-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fee22a1d8c332151e77e19d5f4de43f8842efedccdbab6bf08ba69d58d5140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-prompts-meteor-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dab93fab7c2840eeb9d78277dc25dc871270bad87bf27cccf35509e1ccf9628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-cressida-ini-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a0afc256ae308bd210e19cb7e9518884975fa81f7bfd69ca7ca2e1ac55bf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141910 Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7777d64a1343f42e8f80d8f8f3cde9e71dd74d38f9850534c9214756d79df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146109 Malicious code in perseus-quark-arcturus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f657b0a6018bdd1bfdeef1e46d6a6e7daa9470bd4549627d647c52014c97745b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143894 Malicious code in javascript-umbriel-kronos-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00f1ebe329c4b4ab18fc494517cb4ec5ee2e7059ff770fd9aa2d251d5b5c0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148286 Malicious code in stop-aquarius-barnard-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c424cf28debce1410577b469e5847a0ac3aa9b77d2504b807a03608e3d501ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148126 Malicious code in spectron-webdriver-betelgeuse-odin-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08851659b6a53ea323142e60510fd2ea2215b5c6a75a5928f0eaa11a6e6e9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146484 Malicious code in prettier-plugin-markdown-hydra-sass-loader-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912385a3bb19c421f288dd110a2997827a37baa24d0ef4aded1e7b5bfed9ee5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141172 Malicious code in cosmiconfig-avior-got-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80fc7608b3f64152fd30fbfb841a094ffea14421fddfcb55ff46bf7d5f7aea5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...