Malicious code in command-fomalhaut-neptune-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d78ae16521163a3ed5a492595d96c7e26cff5740ec79450c7dd359b6f060c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-algol-promise-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7ecd24d6f9ae1c5ca13e4b17049e81ec3ef27ba44ce68a71635520d7ca1611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149012 Malicious code in upgrade-flare-delphinus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956297c6f1c0ace19000d0b1b21712bf30dc8a296ad24a20dd6af80560aee5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141855 Malicious code in eclipse-meteor-stop-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670b62a4cb55228c20ad958da47c271f028b2a55a608b305e28381a75d5acb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139511 Malicious code in apollo-express-await-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15ea7d041f0cca0b7a08d87fd49356fb4638b151a0afb8bf2cbd8192a6f6718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140020 Malicious code in blaze-equinox-ceres-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c2805a9e6173d86763438b0da3f4653180b81b634a3827c6a485434b559067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145231 Malicious code in mutation-rest-mongoose-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a079ebfbf35826223a4ed7a0397e374dfc04468205ee22c2a20a8b5d25fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143747 Malicious code in iota-umbriel-webdriver-manager-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6985abad42d26bd68fbeb023ca6e733a1830b93092f21fe9c4b8cd966ad3ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141389 Malicious code in cygnus-zenobia-castor-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6fc83f9a9066367039fde3091f84f2dddbde9e9b230041941f6f04b3d02dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146540 Malicious code in private-radiant-cosmos-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1db17bb2525ea074c0d796c001b79ca20438eb3bfa571940a2c395f991052d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147351 Malicious code in rest-hyperion-await-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3be05d1458b5599c326fbc3293c83e93e49d0db9185fcf229d5a2615ecf53d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142964 Malicious code in google-juno-toml-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c95295e519e35ecd2d623f7afac167f03d8dfb51ce411cbc4ef9c11a77bf1a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142566 Malicious code in forever-enceladus-ganymede-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 355cb569443b16582589d7866f9018fd54c95daaec9b54e9e88071d207fee3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140328 Malicious code in callisto-cygnus-supervisor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7899891f8cc925ee20ff0796029e82e650d8e993a8700427c6e262950b1045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-terser-webpack-plugin-achernar-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1e454a3b4f4d5c66dba0bfc9697d1034ffa85bf2cdc3a171bffaa936b9ac57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-transport-dotenv-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d83035ce63668bd4eb199426469192d2492c2d5e513bc731b0d837d9e29673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-protractor-json-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef0cf775eda6da5ee72ec9ec108786c8ff2381ea7d373895eed288b9c05b03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-gatsby-antares-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9221153c0d07120e15425cec2c46f08a5cc1e742d755211e828a0c45e653843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-castor-rimraf-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53cb9c657508e7f2692c16d60d43936cc7507391d4e49684b451e4afcad2815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...