Malicious code in buffer-celeste-prettier-plugin-markdown-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0b93c3ef015e6aa400f4106766563254f0e2fc58bd1dff4a01ee9921e39aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-subscription-gemini-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ec004a9b8dc4a23c4d08c038f547db7c94aa33f71776a9d79d0e9d9cd27421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-sadr-enceladus-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3780efc712ce8bcc39951a84d27f0638a6df256d941f660efc4901d9ccf7e300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-passport-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42df2a17816922455d422894949135bc0c3aed262172e07ececd4836aa13cb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-zenith-fornax-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc16c35f2b64a72374d593b62f1cda83e549ee73acf82c0f8f8c58a534267b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-enif-apollo-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ce8f43c22312e6ec4fb8f7770cc9bb5108ca8697068e4c8b4bd291dd535e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-airbnb-draco-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01504afcb95e12c1713fa0337df0c7b7117bd5d9a22240957666e63c35a82d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145557 Malicious code in node-sass-webpack-yonder-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ed8275baea7f1fa8830efb7a7a6652ba556aff243edd736d5527d88d1e5b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147317 Malicious code in resolvers-backend-antares-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcdbeb5f3f8404e93c29ffd571f029c12b4afe279214521372044e00e6e2b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148576 Malicious code in test-odin-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01bc67b2111bbd551d0c9c745462194540c9874d0858278baf52970910e982f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140344 Malicious code in callisto-pipe-sedna-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567315862c15130d7ee16b1644ff030a5389ff4cf537b86ea537279fed0aa46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147153 Malicious code in regulus-perseus-aldebaran-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04e115612e5e5581887e57f29803ec3a83b640b1e7c212fb79f0b419f3d6092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140422 Malicious code in carina-rate-limiter-perseus-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de077fa85a8aac069d8b85948635a847e137b4cec30da3ac961db323496c642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-sequelize-pm2-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-hyperion-vuepress-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5882bd95a1aeb8072494322b2b3bd816162a0b8db32129f4b31b572f6b2ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-cz-conventional-changelog-meissa-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d19bafe3c4b592b1e829c62a4fc067747a9322300572915c4be2b3330aec9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-halley-meissa-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee29dde83f4e0b8f16285588b90dd4c94bf82be8c4bcf1fd7b1f20cb507e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-protractor-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89acabbc64b72fe317f20ed366b5d5b06f22a3e8ec4cbf3e386d2d07b44a392e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-winston-browserify-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f681f131eb8845d37ee1bdddfdb57567b5d6228bab90e97c2fd18160b3c7679f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...