Malicious code in epimetheus-fomalhaut-got-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088d7d122940c41b02e3cdeb1474049e7ce9455ae8c61523e12a292449e04400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-thuban-scripts-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef458e303d7a75de0988234b7597f060256d5a409b9cfb707a4041c94d8a5f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-atlas-event-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d0b59465aeb110ed77aa5dc35e61cee72f2d0b21f1d84fadeab03f8f243a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-yonder-umbra-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c027042fd92c3a30c321fafd4afb495182a3bf29c1f24514ba2afb57de9e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-module-tailwindcss-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0a42dd3cdb3164f9a7e9e88a05a7fdb8d309d11dc69e5b66054ef4e34eac8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-cross-env-private-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88c2a543087cca637adc9f032af927567a7bb085fe36740081d91beae1d477a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75171bf41f9d6323e8da8690e976b0fde84e1b27555a35b0af35e961f43f6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-commitlint-config-angular-event-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac0610553b6d391b26ea61da0ebe011f1788f208b501fa46e2ed0c1f3ff7bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-sqlite-phoebe-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68930a3bb62183db59be60a97ce209a4b1f7ec8908589e1ca718a0080708f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146470 Malicious code in prettier-json-tailwindcss-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee324e231c84dbdd64e4ef7407cb835517a03e0f5190c29b420a89b03dbb7410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140996 Malicious code in commitlint-webdriver-mocha-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb9f36e47eee948dd38ebe0cf6ae2a2da5e5920cf63ac7a40deb44853bfc698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147804 Malicious code in selenium-hercules-chakra-ui-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc938ef30744453595cc43f857769b3c672e59f89307afd341e5f45796c71534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140611 Malicious code in chakra-ui-cypress-juno-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cdf185ec38aecbc412f7e0635a106bdbaf491f09b8eb1449089a252ce03054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143848 Malicious code in jasmine-carpo-scorpius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0e478b82bd4c6989f3b5401fe834e59f45fd9f764b88f40b4aad9210d51eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147319 Malicious code in resolvers-celeste-antd-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e4cef15b804d34241feea86545e5b71b9cb1ccf014f30da9512e79a4b156da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141037 Malicious code in config-puppeteer-spica-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c91cc0f7b3784492f428d41a716eb3d3b4bd1739e61db8769681c5e6d90d167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142788 Malicious code in galaxy-csv-middleware-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a90c0ed8d48568ce28902e224b77e7b8d7911333c8d1ab524cabdb671285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143869 Malicious code in jasmine-uglify-js-cygnus-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68c8187bb9a4d759fc7a92576e1862dc9d507e32cff5c91a862a9c51dba18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148064 Malicious code in socketio-sedna-centauri-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf5c1589ac18e2c3471d0274bbd2f7da00cb75993fd0a325f908768672968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...