Malicious code in fomalhaut-ora-cybernetics-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9964b1a5f5727aa60a83b521fded36b2099112209577c7f81b7be40560c99fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186751 Malicious code in enif-frontend-carpo-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fc721aabd2d538e8644cb4667b0304f9635e08ed0d4c2a986383e4a2ab9e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188158 Malicious code in mysql-cassini-unuk-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9073f9335c1be4ff425490df7e7f081f828afa71bed9769dd505b3c85f82688d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186771 Malicious code in envconfig-apollo-dependencies-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6efee11ebc8382fbece0fc1803392ff0837ae4af2341841d4b417793e252fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-spectron-sagitta-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc2280be1e963104556f516b30bcb43fa58ce27dd58b684163c89f1da636b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187244 Malicious code in grus-nodemon-rehype-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d559410a1d7d46410b0043f04df13062a94d3ab8a1f955226d05167489046f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185705 Malicious code in awk-minify-minify-proxy-omicron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1208fc2ae9856f039e6e138fcb07fbd979361c684b17686c6b35f22247a99bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185576 Malicious code in assert-analyze-authorize-awk-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c630eccb84be45213459c6615f3f2e1a07d5142b357a8e728754031a1209dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189607 Malicious code in spectron-flare-css-loader-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a3021cdbe1ba768aeed367daffaba3184d09ca0b1076ec3c8fe83fc378143f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technosignature-quark-quito-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b4042a3cb59a90e217d0c5be97bae397ae22e8022f27625c6ec1d06afecb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-xenon-avior-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f4f073cd819427d81027c4347194f2093797d2605e1e90dbf83b1979f7d03c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-karma-xml-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0d2d3a27b749da169c991b93d852c67354e41e03611bad2d5b9db3647047e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-cosmogenic-spectron-webdriver-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58a08ce2390b39ba0775e86569c351f7f8c1ac7780c89872374334fa4a05289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oscillation-aquarius-ursa-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7127678160b96508d807efcfe044a57b7f9a9206a3c2546e146450bed08b547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-publish-oberon-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6837a499af3bd764db78016d59ed3b3b1fe3f57a03f81847910a466b622002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-scripts-plutology-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19edea377b5bd205b1005922e9bdd267e862f64cc222d1ea9d74a16977f9db72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-canopus-graphql-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4cfec36e2798cb46c6101c52a91328a2ffb0f2c3298b732437bea7f1e20372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-eslint-sails-membrane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9c8ddb23f24da56881beee4ee5fa6011c178ea702b512177758630c0ecfceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189616 Malicious code in spectron-webdriver-nodemon-sedimentology-on (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e790ec19781e6bae0e122b31564bb4f314ef39cee5af5b11865dd3d38e722a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187588 Malicious code in jasmine-iota-apollo-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb148d7fe3af5383c5182391ac79de62170ac8d4404462c54639a8bc134a119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...