Malicious code in ursa-apollo-xenon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edbb8ecb72415ce0c0623a1d88fab94233dda638e82c410ab6280b3fd621c2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-yaml-meteor-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d215441ec813faf80ea353ec77a212352b199912065942b6bb274f8b4c5103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-csrf-shelljs-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341f7f2f7872be0850775e6d8315dcf63081cbcf5cc095b0af5b05bd2ef6ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141838 Malicious code in dynamo-sirius-envconfig-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df72fdf1db31d3ba69f10d1afc738c0f61de9b9b53083f7d7d2e1388e1bf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144893 Malicious code in metalsmith-warp-lacerta-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dce56374fb88b40c9774518f1f30bd60741869f567c8a7eeaf5fd5b0024e250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144325 Malicious code in less-loader-phoebe-scripts-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0453a8015b61b94e10fc0eae56409daed68846374d696e999e769cf556719508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139234 Malicious code in aether-mysql-eslint-config-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e723bdfeb0ecf0f7b823a7630a67f5018f37e2669440510b547ed98b4e60b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-io-commitizen-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14422502a986da3f3e8a3e58d27382f380fdb312eedf3d04e62baee24a4dcd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145665 Malicious code in nova-protractor-nightmare-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b9e415757c6071f6593050f97c59f34e49f7c658690288d860be19b3ca16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140830 Malicious code in cluster-loop-ignite-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633fcf5eb2e7b3b4eef90de751ff521b733441e804de9f3e4c7c0d54f812d99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143851 Malicious code in jasmine-fetch-standard-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c5b2a64e133eb436cf9d493d5f98ad2e3d60e9c56f7f4bbe9dd7a9bedb5315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139976 Malicious code in betelgeuse-enceladus-comet-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a864a3071455032bdb36223a7ab762490b721fd9357cd81fd5c6132fffefe436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149666 Malicious code in xenon-umbriel-jekyll-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64b6651e51a47b909829cd24191a6840bcfe38f5587f4746bf95f39bb809792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138702 Malicious code in exclusive-amaranth-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8360dffed6c70e9c222c697a15ab756366193c77dff4a7f17660630761ee9db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim-ivory-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2d7b6ee0045011942c4eb2ac8391d2d977b1ca09bc72e10628e399ee0bd251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135a84cda64a09dd0e4e91546007c8a8c02d203ea39cbf69ade73e6d052bfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ikan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cf99f195eb0ddc1a9cc1bcfa34f11268aae01d87a89cd8103beba985b662fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a753161763e0469f5c27fd4bf7881e9b8f3c404c6289ea1069a60cd33f001df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b1be8e4a62d1865bcbbb5d8bcc18e45a296bd7c5270d708d42f6c583bc6e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132102 Malicious code in arif-martabak90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8bdd6807338074ded7b1abbfcbef1c6aa404489acfcb98f1931115a2990cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...