Malicious code in mocha-typeorm-regulus-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb72c95947fa7d58b028dd38afff0fb452892ec02153990107a8ef8ebcb201d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-eslint-config-gemini-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcc24c27025a5441e1c4b98214d4687b5681a0e5e0ffa0d6616f4868e1f2e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-jest-update-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c5507f525f0b7c13e0a023ac4998e1cb4cbbd33c5ed1721695fa1b08ce51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-hyperion-nova-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a26aa108c03ab09f42e137ce63034d09c9d1028ffd7e9bc25d0d6bf4adad17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-test-jest-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad12d88a9ef4fa5d1ba411a5bbf157a43c53931bf1c5eca24e0a51a56eb7b65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-antares-terser-webpack-plugin-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621360111310bb1d7dcd6fc7f22631c95a9ca27f7eed5e0424872f4f863ea333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-unuk-weywot-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462eea52ecf8421c53bb7dc5ea4eb44ec9e279532735153b7c54f5e3e44e0bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-event-convict-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f446aaf24a37aca04db5c7b3b7a5018dd7160c69c812dba273d37e7bfc1a947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-version-wolf-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f69a9086862655d20f6380f2c35b0ee7d3c426cdfdbd882de75490dd08a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-vulcan-gatsby-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ec49c3b67516e3f61e09361c25148275d3b217f976b8a70042ad1a71ac14b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-frontend-toml-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf77bba0885f150e6e4f84b84c43c446109c22577967bb4298dd8ba4cb9186b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-npm-farout-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1ada7f740daf4ec82a6105cd6b46ced4f8385c45a41d911c90df80cba58d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-terser-yonder-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3d1ff5ace7d12bc9322ce74cb70df5f4688a3eab7f4e7b50e4591f92e40a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142063 Malicious code in enif-sequelize-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdaf7d09db460ea49ef4af746993205b3c7f4df469d8757fa497731a2ed8676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145899 Malicious code in ora-webdriver-mocha-koa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264d6148006e14acb388e5a9fa325a0f504bdb13ba6730af51dfd4004aabd832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144622 Malicious code in magellan-astro-taurus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf0ce6cfcc1944002839109c84e81c317bf8ee3ead756f370ece942286982dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148280 Malicious code in start-run-script-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe781b616783272336fc83c52ff140f961736366976234f8bf7a06d0ac590387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-nightwatch-tailwindcss-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0154347a1de85eb8f3cfcc2d53c17da34e78c91e8d4ac0c14e7bace97e22ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-xerxes-luna-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...