Malicious code in gatsby-betelgeuse-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2154045e7fb54a083b9029a1dbd9999c466e2d28e5a016fdea509f93c03163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146063 Malicious code in pegasus-vulcan-framework-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49c20d826fc3caba360e82a06dd11069ea8cb60d4ffcfa801f351b1e7f5717c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145986 Malicious code in passport-rate-limiter-cypress-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681229ea7b3d9ec5cfef526efbe06dedeca6d8a377a88bc79cdb618ee17c45bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139992 Malicious code in betelgeuse-nconf-mongoose-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c7e9ccfbb66030779cfdb08d5974f09dae0bd9b40fce68f9703983ce096da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140835 Malicious code in cluster-rigel-pino-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540273cf76e888d65ccc277438b220611c8a42b613f6dc7a37d1f181bd9ce7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148300 Malicious code in stop-package-phenomic-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc099d38b27f19ea7c371913a1c7be9ca31b14fcc5d5c992ed20417fdc8eea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141555 Malicious code in deneb-quark-dotenv-safe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79765b50847846187d16a72a0ce89db9097d30c7599971e7283f47b87b0a8334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143959 Malicious code in jovian-rollup-plugin-jest-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f53370f26cf3478ba29cfe3709afd2de86c87b49aacc771a6ad02106cda567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142770 Malicious code in gacrux-hermes-mysql-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968c91bfa918d1b575481a21e04dc8ff86bc84701ba0de6aeff412ae75a289f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140058 Malicious code in blitz-pulsar-bootes-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f143c148c7e4c8e2bb84556a6a8e227304fefdc3d346c1b959bf9c04f6f75559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149078 Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140360 Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149298 Malicious code in wasat-public-commitlint-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86828810b79ed18283b0b316575834d8a621b042d5abb7821c65806ffd04bc77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147595 Malicious code in sagitta-europa-xerxes-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b016074ca2bf81d31113e17620b1a0ae9d8d9e1abef97cc8f872badf16e6e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142008 Malicious code in eleventy-nightwatch-tailwindcss-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0154347a1de85eb8f3cfcc2d53c17da34e78c91e8d4ac0c14e7bace97e22ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145827 Malicious code in ophiuchus-metalsmith-apollo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e7e51a83f23a65a177aa0973d2ad88d24a3da3dda667c7cf1f4228fbb52357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145199 Malicious code in mui-cypress-blitz-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991e983f3904a6d0ef9d7df604599d90c9d1225c9f60e4d425316250f0264ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146831 Malicious code in pulsar-farout-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936458586d508d170d49bbd490dbb216acb183554cece11d629cd5fddeff09bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential-salmon-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b710994e484177da233d848af8e1549c3b277f9d7efcf01c868add0e2abb1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...