Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143978 Malicious code in json-ophiuchus-jovian-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d659d7f90a9182f59291cdce9db87464dc18d0fafa9c045337b245b6bd786c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-prompts-aurora-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11be7b2ecaf34df0c32fbae745c6c3a05bde5437eccbeb24fc6802ad2c760001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-express-pipe-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da7e4b1d7e60ee0615d87ce284dd64e6b3589d46b59a2f04f438ece588486e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-socketio-enif-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad3112923e340d924bbe9b609468fbed79b3805c41fd9f6c46d9810c00ae930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-octans-procyon-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974400de422e2a3fb0d03cf40d45a0476bca83b458b272e5638ed90165ed00e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-solis-hydra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204e4c944e5588742767a5571cfc83804f233a9273e1e095b54ca7a84a00cae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-triton-canopus-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a42074780f1f87ff450718d0cc457d9f648d07232d8b109f0e0217dc471b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-polaris-schema-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d601c2e8fa6c9ff5c441fca9727006e3f2ba484a9a64e97eaf9b4ffb221358a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148101 Malicious code in spawn-lynx-phenomic-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ae23c6d32d600455a747d54659c1bd327ff6c5d32b9722c11f6e3dddde3461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149406 Malicious code in webpack-rimraf-eris-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf70ed59506b87bb301e207eb1834afa3b553ef1cdcd022c7e11d77fda8abe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144029 Malicious code in juno-levels-bunyan-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be54ebc21569f3ca445b4b90feb01ac0ec8a1d4b192bb4044c8284d34e13de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147685 Malicious code in sass-loader-xml-altair-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602f04ec56ac19f9194b5ede251f2d95df2f758e975cc2eb78ff7be59af51050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140370 Malicious code in canopus-proxima-yaml-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab40b667df69aafddc22f108f2d07a25f78edad369a93fe46cb65cacb2f989a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143209 Malicious code in heka-nebula-rollup-plugin-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27d54fb6425d7716f20259ac15707ab8354e139d9a713e31dd0d222e2275140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146121 Malicious code in perseus-triton-query-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fe942855422456b2b094db1bd45bdae5ec15bfecb41962f6257d1a0d834689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-restart-koa-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1780b515b5dd9b790fad828a8f9fa7156196bc7166d320a62ce6341d0f4169ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-inquirer-meissa-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244d7028d0fe72ef39f3f651bca81617eb19935420a4860a99c67f63f6ef8ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-ignite-canopus-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bce8256cc0e9ce5e492f8beca90f5cdb3cd66079b137e9c3bf0ea299205d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...