Malicious code in algol-axios-neptune-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c252bb6bf02a453e2c040c92b6ad36011d7b90fed53499c361d837ed2742b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-phoenix-sagitta-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a022901a26ab940ab59770527d2157a740e1c08e7818d0ef15f845271f1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-acamar-betelgeuse-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7469440b3ac7a6f8eee981d0de7d186b9e3be1eb14762415ac884f84efec9817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-solis-charon-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0269f648fd5f31af9e6f42ee7554837900b48663d792da87cc04a3f3034c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-triton-writable-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1439b571c88fef6fd5907adc4a1e16f9fb19de36f7e8ba79622ff79a3c34b79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-antd-venus-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cdf93349111eb5fb097432eab96ad486bd16e7b12600203a2e5c3fb9b07aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-pyxis-arcturus-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebdc89424eadb98b9d2b7e8972fd02b2887cfdb4e154f4d2e97576361588fdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-cors-slidev-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7b7d21c5d587f3e9a9bb72b1347fd39d95b97c318ed5cf5b7303f5a8c3f880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139477 Malicious code in apex-frontend-bootstrap-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b33ef97cc7198d0ccc014aa6a18a7cb7f156edffa6ce990a9bc80488bf5e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142304 Malicious code in event-atlas-spica-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067b8b530c373832061d5f175a4d881584493dd9a7b8a77b32796735fc9af307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140295 Malicious code in callback-avior-apollo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bac3e861534cf5cd11bb2bc5fc8ff37a0ada127a12c7e2e75079a7b7e03fade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149802 Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bc65e3e45d0b0fb2609555e9248cc76a7bb27b73e51d498e2ddfba8bbef536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142794 Malicious code in galaxy-semantic-release-auriga-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c9d3fed4f83d961b8702a5d20149d2721e2318a9e39ae8feaa081ad159467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144562 Malicious code in loopback-sedna-vulcan-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e49376076f59d319a4d476b48a806f2b480af776828daf05d7824c7c6a124d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142086 Malicious code in envconfig-sagitta-procyon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf67b16f212ba924c7631f97f60e80217eff08f2b58584d029b03c21095a338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146233 Malicious code in pino-pretty-gemini-blaze-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2933cf53141966341dc532869b9f1b14b26188a435d8d1446e8c5ece9588b2ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149524 Malicious code in winston-reveal-md-betelgeuse-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5353a675fc71a6f7979ed34bb601e42339f6f0c11956bee5628b60cfcb84881f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145679 Malicious code in npm-helios-nuxtjs-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d011b06489abe320d03829c7aeb72ebc9c37f4a034533c6bde985f438dae83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144238 Malicious code in lacerta-electron-gemini-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7e0b7753b1e3940c0e8d9594dd3fa95f29c0b4284b8c99b957e293100a8c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...