Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-neptune-dione-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0c1d2d632485105b695892cfdf331ec228fa9c0c4b44667c6207987bd0b91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141539 Malicious code in deneb-cli-process-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456e0252c4e2a30003d54a2df3e186700c4398ac5252d762bff1e11127186e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148859 Malicious code in typeorm-toml-mocha-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb6c01a744d2a87102e2f7a4c1544a42bf5ce2168f0ef424b8ef24f9adddda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140953 Malicious code in commitlint-auriga-xenos-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb906d86cc0ce4b7f22a79fc879e93b1bbbb1edcf8e8ec7e38e60c024b69811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141129 Malicious code in cors-mdx-spica-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a41993407581197ea7067a764303b3c1766883415c39928ee3651e5278e64f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149536 Malicious code in winston-yildun-less-loader-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69a769cca21c2b2a2a822e2da066c9daed6de27648e615f57d6c614b2376b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148187 Malicious code in spinner-castor-commitizen-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d63d7d06b5a118a91516b5a41f47e4a941c8c4b433eab51718c01dda4b1f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149840 Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-elektra-quantum-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a00342994850ce03c837378e8eda96dd6f80397b14d78a04906aa43710f198b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-cyan-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69618140d95a93dd960616e1711555b0dd44e745b6e3235bcd933d5a4706ed9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive-scarlet-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d625dc8392046d7f079d2c9f470edf6e05d3884f821185549c04b7d8a46d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138757 Malicious code in gothic-plum-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a609b5dcf10477d4d9e3252e4994993f6206ef46bb9c00c30ae5de5ffc8e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klanting6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ad936250074374fa3c68f8f42f09030b28d6b6e3eccd5c732809130d9e88f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698c8312aa46f9af4d03d0e473457377330bd4ef4f9c30293dd808fbcc1a1cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-serabi21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884bd8e7b720279568c80f9d5f116d7bc41f29aac88182d47d64f26ad4209633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gulai16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64947660567f3958162856f32952dcd2a63f271d7f82eb0f72527b799a41eb65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-donat92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16e1b15d9522d60922e11374bf7fc465bdb62f7fff67be20add97b8710a91f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-telur98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f451c54f54d801001e725fa9e7ef60021bbd8c6edb3d76b857bfe242cb81c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07aa50af611273a0ac206d07e459762491cc978ea48fc0e38c3a66f5a3da53bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...