Malicious code in antares-mysql-gacrux-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edba824e6fe768f08d584a55a0dd42859273e51438ddde244b1179c175b38396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-less-loader-wolf-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4660974b82eba50e6a46175e2eb14b0588dc47c39299a00712db48078494c627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-hydra-adonis-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9766e27ad16780af1cc83b26d319905d9c6ffcf233d0efe0840ea32a88799f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-deimos-colors-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a78a3e303545fe7a4cf7c007b28503496a490a019602bff17224b9d992cec9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-ultra-magellan-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc63d7a877be1b31e23320b8331884aba215edc7b967e6bda66e1813e04d2b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-typeorm-development-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21f3f51d085b23b028fb1c66c2191341c860e04f3b386fc93fc4f4c4db87ed1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-sagitta-public-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9486da0eab8d7a0b1571a979e39d9cc7458f2cbae2f6fc67958c37e403b7af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-helmet-express-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42282ed6206029f07bd399aba888e5b4efff6d0382970bd2d500ca5c6b392656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-koa-metalsmith-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bc283f477976680eaac5b0948d6b00ba0ea1609e62c32da3e1d5ed24f1be92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-puppeteer-eris-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acdb15931322ad653a80ba6c10832d92347944ecd041b0e916f5d0d8ecc2e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-sirius-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e026ec1383e2ed818e3adf3d1ee213d48326c4e6461ec6f0ce948c61a8e5df25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-neptune-await-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc82087e1ae03780085eb9f9224d3323f0d27a4b7a3782ee393c109ab082532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-local-meissa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555721a317e20b9a35f22afd4a810a69c596a01db3cc09160097074ed711fdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141592 Malicious code in despina-css-loader-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc9b93c027937183923cf0c75079a363eef9f31123a01c0eae6813aea03b2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-xenon-solis-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0dee32d71c4e60b53942d2193254fc0fb9c1cf75c017ce3a1bb5db672386ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141835 Malicious code in dynamo-phoebe-yildun-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73982bcdeebf085907110b52f7125d6b6f8be6363befafffd44ffd4a6dcbc7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143693 Malicious code in io-charon-dactyl-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb076b8a92826ac002b2ee673f2234d7610855e9af4e253a5bd890350ac07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147487 Malicious code in rocket-yaml-vortex-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...