Malicious code in ini-query-bellatrix-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17868109012618c362d16e0753aafcde22ed72095743ee03fc5cd4f777ae66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-publish-hermes-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faed0d9ac5f74a79bcc66d9aaa67b60d041eebe36f6287a5dd01a2cc9ff9c830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed41735893bd2e6c37f5d184b83eee13799a2223968480fb1576efc6310eaf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-europa-aquarius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316a3c1e5a59dec9c0fb21e4d692b1f7f1fa2093ace060ec4a6bcca191b15035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-nightwatch-toml-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523f1820b440f49068bc2daabd47c83763d497296a051e9135e5bc7bcfaf32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-pipe-terser-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b346e7180c776eeac064af2ee804e6e3afb1e9fb00242af926790c461827e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-ini-markdownlint-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65662cda736d980784b56270f444cf897c757c5fde067bd14ebded2277d2d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-nodejs-framework-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a0aea906337d6f6bc7a6439a9566fe6ceaa9a13b30010fcf3e994d9d76844e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147076 Malicious code in readable-astro-npm-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c647e05dd037905883f77cef6440b9ac81382f0ede90b58ede2e43bfc6a99a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148537 Malicious code in terser-request-test-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d93cff86f78ba974b32c4a49a98e38139666c4e5f9eaa44ee82074c2c4ccec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142561 Malicious code in forever-astro-element-ui-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb32b73101078f30afc48ba9b5202a97f6b98b70d003ee7aa0e2098aa588b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145312 Malicious code in nconf-electron-commitizen-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c7414e208e7430f5a3b3b2c501f26ce402685f3fe6c97836993afba3b9dc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142877 Malicious code in geckodriver-nuxtjs-typeorm-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2930cfb3b48567b4f11af36b177f077dd690840f10b74887c4e301a2e747b364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149319 Malicious code in webdriver-manager-fusion-mongodb-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c18743cfd4ff6c9eedea2a8176bfbb837d77317f5737a3996133ffe258edf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140916 Malicious code in command-nodemon-foundation-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb7856d8b86303e4675407ea4fd7ad07065dcd9a5245aa12f3623b5f23df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139182 Malicious code in acamar-perseus-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c01d851b7518dc08365875d2faf898162379eab5f57f890791a44de7fab39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143179 Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141440 Malicious code in dactyl-flare-galaxy-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf46e48e76d6587396a1177789bec4bdc75522c87f71b961f23e88989f9223e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141816 Malicious code in duplex-octans-proxima-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b3bf319b92e4a0abaaa40adf046cf088a33ab1547bfe298f363a01dbf049a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...