Malicious code in virgo-zenith-restart-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fe21562e735a0fe98f27a49b5b6b1b0381e2bf1d80496151aac69fb232dfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-cordelia-enceladus-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b8bd418da80c790ee8e7a2408a7e231eb7d041e340392fe401e6336a6b6c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-redis-luna-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7dc99789c6a0bc0bffec45b88cad0cdbd527b9612b08e1c1088d1d9fa367c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-andromeda-less-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756e1e5dec54aa1aff257fdcd777d65f86e0a6df55149226949ec83b609f32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-astro-ophiuchus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3fb2505e9c00b648160e9998edbd8d5d7c5b389069ddca7150a5c3cf789f7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-less-loader-less-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed17eb82e66e960db0daaa93d23a0a33f3a4afd2a64e3a3e4b53ec6afa7a13a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-protractor-wasat-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9511c4eeecf15d09a5994d24a1e38e1d7eade75e224307dcfbffc121fc6777f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-xenos-xenon-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c744d5eb04b0340e2461f09e10bcadd760e62c092ed3d0cca00dad88f572b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144774 Malicious code in mdx-react-bootstrap-javascript-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e1744c55940a789327d9b33cc8d592c73c78aba0180a6c3d6f4db1c9a6d740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145347 Malicious code in nebula-meissa-shelljs-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb81e90c76d751feb2f2117f1826265a6d23d702d9560c78ad944dd9b7a17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149361 Malicious code in webdriver-mocha-run-script-kastra-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9330f8382414519d87d54d1c2a7975ad454615e35b28607ecca8b6e78e0e8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142340 Malicious code in exec-fusion-backend-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014d99acd1501becd1077febb9a8685ac031547e536086bee7f85daedf576a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149742 Malicious code in xo-adonis-callisto-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86b777e7b69686863ef14110bef4d129fd9013113a9688fb043f551c76f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147007 Malicious code in quito-umbra-registry-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef2cead8bc437414921c520821083a4ff3b65865bf0b3b088799fa0c5de2657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144264 Malicious code in leda-convict-commitizen-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8d2bd7bc5314ec5274d837a577d0e748ae44450cc9db11d1fb8e7a98b1224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145252 Malicious code in mysql-leda-supervisor-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5b817f89bb35456bfa48a857ce4a8495d2e3544a7f58f70edec8eb1d974d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142827 Malicious code in ganymede-umbriel-hexo-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d009dee3dfc15d5c2b97f41e178224d0f0c01bd4a77c68c903623372d3206c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141923 Malicious code in electron-nashira-deneb-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6bba061dc6503534fe0cb96c556dd9eb19f586a2cb1797fd05c0f28879fa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140274 Malicious code in cache-jekyll-pavo-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b711485d592350a6a83a3dabdc407a543fc87d03c86434e29a65601f32010d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139625 Malicious code in async-halley-adonis-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c49800a339e63e2f06a6f4c122c665e86c4094652566afaabe5ae0fba35868a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...