Malicious code in betelgeuse-perseus-despina-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba22f0c594d568d54e12967d841c787fd3e71573d84357c6a218f291e91747a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edeeb03d25b128fd84b87b2e7eb8c732469db592c485a2eadbb54f27cb71452b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187771 Malicious code in library-alphard-nova-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d124aff39da9d10edbd76e65c207c1bb625940619d25f3d00674c4c381c61ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-subscription-changelog-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c56be628301573592cc719e5e4c23f4290e8e35e1e080e461e66a3ab71b489a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185694 Malicious code in await-husky-electron-builder-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86a1bbe4cecbcb8f3590b941a42cef3a87592003a2e822f176e34decbd8f04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189574 Malicious code in socket-uglify-notify-assert-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79e32644b78e05c920de11e095dba2ea5f33e39ee8abd5838124522edd0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-perseus-pm2-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc57a4e4f391d90b732c2fbc2a15299c92d0e333ee56ee1fd78c4fcc255ea485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188512 Malicious code in paleoclimatology-jsonp-troposphere-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bac983555254b679f31ae00e59e0bfcc51c843668160a92ba0b7dcdf8fc6e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183108 Malicious code in item-ati-labza (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5452425ea102be4efd47b4be0d2401eaaf8594db68aefc325a94be41b3e7e65b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183876 Malicious code in masv-ilmo-civa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f5184a8fbf05d3e4eddf6186271a0e3601c32717b6f71138de06fe5a1481fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181948 Malicious code in flights-ilutg-zilsdsdfsgauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158f138419d34d6150f130f4a49f191b5af0233e7a0270840f4fac3971c5931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184133 Malicious code in mlokok-lofki-afahiukuaagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e83920cc7e9fcf4801a92588e5491c7f5b6d8a94b80a9b33a4c0443ca6c878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181469 Malicious code in cewe16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70737668630f93820f229e54051acbeec29cc2c6927298206dc6739b12b06db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65f45b83170a41b7dd37875ab7eb375da209f279c91e713eea4e1c816148d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180329 Malicious code in teate-thy-sonic-ekwut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e897386d4d188e2625688ac40be3c20fc2022538945e9d0aff39ed612eeae984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175242 Malicious code in kapvino-socvni-fambapvcavnvai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f3d08f1789aaa5d15188ac2e174eee1317f125e6b5117247a9d0b2e984b9813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in try-iutu-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19edf1c695aed7dfc4ffa333d0c0e102fedfe39031bcbb14dca2e19141bc620f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sogdani-odgafdgagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a78c98854a9a88186ae0503c64dafe8bfa1ca55f63b51154a709e4ddc7ed17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175850 Malicious code in lia-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5dc5f1ccbe684d95be7b61c2bc41566a25de1ba7fa2e92734e6c536a77cc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...