Malicious code in standard-callback-venus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54afa4fcb2836ea95ffb5db003dc4c6f9a022be7b0b74462aacc150cf13c0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-husky-nightwatch-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20316704e355b8f90ebd7ca6957fb6a2bac05276f95761d8281561f3a11757a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-ganymede-sirius-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e9ae9e62a1196b1a4ae777bc6ae0a4cd8e3f48f279f852f8802edfd651784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-cross-env-private-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88c2a543087cca637adc9f032af927567a7bb085fe36740081d91beae1d477a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-request-loglevel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628ad922bdf929ddebb5c4e0f9679a98b148d988f858aee6e97267b60eb8ee26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-nestjs-nodemon-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bca58c5db7f633962cd43a5bc3ee223af16b073b273e82fa1008712c7fafb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-fetch-epimetheus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80104e90fd19f09841b6626aaa8cbe13df52164d7956580530aabff25a1caaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-cross-env-markdown-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92b6b8c6a2644f72700eeb3abdadd149b76826d296338e032bf88f95a1e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-umbriel-betelgeuse-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49aed667d56d8cc8885f4af0fcabcf078c4098c9b6ba017f25d958cddd56a802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-metalsmith-soap-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3eed56ac6234cf263ebbaef75ed8de7d887c7664524ec5fea3555447a22a469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-less-io-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34eb09b771f9b1127dcb61d38526c7427d7ddefd7e5dc2b2bfff596afa974fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147038 Malicious code in rate-limiter-google-halley-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4386b673d0345f9098810f5fc8d9358c549432be9c1f07dc0a24c3c44911e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143814 Malicious code in janus-jekyll-parcel-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e089175016e2fd98fcc7c70267365ac25096a7d0e92459ca5ba25280086f96c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140995 Malicious code in commitlint-triton-less-loader-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359f28fccd67ed92da7ca0e7b2618ad8b2231c15a5d76882a1f4682b81ed5219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140924 Malicious code in commitizen-await-commitlint-config-angular-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ca5ab4510a606274ae8a004323b0e1abe851ab2bd6248263f9b5647d2de6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141718 Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd4098cf7952532438e0fcee118c18ba0061965c413cfe88a091ffe48f76af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142325 Malicious code in event-spica-gridsome-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f0c6290eac850e1d6c4cb0fc81023c3fbee17e9f5b5395d1c16f9dc4ec4e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-style-loader-webpack-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...