Malicious code in xo-repository-package-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1c1b4e798413ed67d60bf079bd9e72384081d946926bf9522d774979b4dc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-apollo-ganymede-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453ab8306131fbef52d8e12174348e51bbd1e7c604b02ca83a55b33e146a9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140588 Malicious code in chai-dione-juno-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a951b77c82df55f7b3fe4649ffc992bbf0432bd91321308309ec19464d6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143759 Malicious code in izar-mdx-csrf-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd48dce86c37a361649e24f14a11f5ae82095ea0c041fb843b7deb540d94869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145065 Malicious code in mocha-aldebaran-nashira-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1575e1db5935e5a93f31d629ad6daf1a3a9220b1bcba15d162499b8e542dfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142480 Malicious code in figures-protractor-changelog-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6927adefae2b36f27f179178319310ec17e61ada0fa07dde6c9c2c00d2085a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146695 Malicious code in protractor-pm2-cosmiconfig-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b442cd6b7fe699a932768c2d49b7787c6c6819ff639e44e5280a215be7563f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147768 Malicious code in sedna-hugo-webdriver-manager-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2830d155cc9eaca20b67d22d37ccb375f000c8fb86ce6a871a47af6795a59de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142630 Malicious code in fornax-link-framework-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149495 Malicious code in winston-got-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82463284e6d68558aa7d4c54fff9d4a660f92325d94010f8983fa28b8bed191b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146640 Malicious code in promise-global-wolf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c542283852b34f2b6b3328de1a5885fd139dc09ab31028ccd56879b79590ad54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143324 Malicious code in hermes-relay-mensa-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b7840f7cacb1472b789652d724c055490d06c02148c37251adb38ffaeff035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148279 Malicious code in start-passport-sequelize-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de45bfb716eaeb6454afb5c70c2a2b00a793a3ec1e07000068e8e5a5544abfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146719 Malicious code in proxima-hyperion-vortex-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adaafd343659e7777c9a7a305eff3bc02b790d3119815ad8231b911b0c801068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146771 Malicious code in public-zephyr-neptune-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072d15f062054089466bfebb73e1f6dba852a9ff2763e0b168a42e2ae7742225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145261 Malicious code in mysql-pm2-ceres-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf871a4877a3996129929de380f4c025915ab6280a12ca4aa41a9543b269d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149447 Malicious code in weywot-triton-wolf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c76a23fb4b2ec2a76ff4c94f687642511b026eacfe0b07ee54c8f8ec80fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149068 Malicious code in ursa-phoenix-webpack-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0778f1068026d84c80059775ace98837d4c0ad76ac7c5bf4886c84953646e947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...