Malicious code in local-run-script-ophiuchus-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb8344fa0bf708a5d389890c5264e3d60bb553c221469e2dcda9bf9d1a03281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-arcturus-heka-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3189c19091c06f152dcaf7051af04de730e644743c984bf3c5753b06b2ee2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149365 Malicious code in webdriverio-dactyl-node-sass-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d82883c4820c0624706b644e21797994f6a8e2cd33da1ec89e6da0d2cded544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149495 Malicious code in winston-got-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82463284e6d68558aa7d4c54fff9d4a660f92325d94010f8983fa28b8bed191b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143155 Malicious code in halley-mensa-prompts-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855e3f107c149e03bb867dc4f32af1a5ac1d3d7995590bfd0e43e51d71189212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141410 Malicious code in cypress-unuk-helios-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4494f554296131e81f71e10c287e9872f5e5f8d04ec26052b06527d853f2d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144898 Malicious code in meteor-apollo-upgrade-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6297cc76699859130e9718018440cd30c840913c432fca2c2f56741aa440712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147865 Malicious code in sequelize-equinox-lacerta-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3e2d46d3d517afc6557d20aa925eda1d31db589962ff1f1696639167d9e4ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145391 Malicious code in nestjs-cressida-pegasus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148363 Malicious code in subscription-non-blocking-auth0-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e18466e63e0b1466c9156c1ac987a1c7a353065e6e08d5f6cf3cbb83eacee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142560 Malicious code in forever-apollo-oauth-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90943887c088c5605934a7f3eb8800f69d5e476dce2f64c9ae90f658706a9516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142766 Malicious code in gacrux-ganymede-fomalhaut-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1a8e305affdf35bf9259a55af9f339036df0c226f0a7e230b625d81909cf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143272 Malicious code in hercules-betelgeuse-build-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8705cb1053e89ed2a14becdd01e0d3d70ae1c4a565c3176eac6a1bcd5fd245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144974 Malicious code in mini-css-extract-plugin-gatsby-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8d6e129f1fb2b77342ec6add65d3ccbf071b23d65893e28f8b00c0c398047b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141670 Malicious code in docusaurus-lyra-ganymede-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0eea79486e0ada48de0b1c4725370f54af12d5621874cdacacc2cc14e24fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140855 Malicious code in colors-neptune-dotenv-parse-variables-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5537dac183ddea56fe80ce29f10e2395b13fd7e9a0c8af926ed0e4c2a5b4a9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146531 Malicious code in private-eris-express-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733ecda5e2516de20ce076f444c88152fd2870e9e779df984d3a8cd9301b5fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145793 Malicious code in odin-cross-env-prettier-plugin-markdown-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d798b3df9722c02b19a63a5496fb67f9983705c530880060587015ae941e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142880 Malicious code in geckodriver-rate-limiter-iota-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acfac2b63c901e11f2748993f0cd58e414c2c64166bbee7ca83b707018519d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...