Malicious code in miranda-dotenv-parse-variables-middleware-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbc13dda52cce500456ae68796660af748d0bb9d8b77d1273e8d13427b21b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-repository-package-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1c1b4e798413ed67d60bf079bd9e72384081d946926bf9522d774979b4dc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-apollo-ganymede-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a453ab8306131fbef52d8e12174348e51bbd1e7c604b02ca83a55b33e146a9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140045 Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139536 Malicious code in aquarius-fornax-mocha-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0429d5658b57d37a3469eeefcc63d48eff90681f01f03cd075ebd59e13521048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142335 Malicious code in exec-antares-prettier-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc33f258f0bf65bad6cb0915fe1fb874bdd299bdd68df3a0c25c770b672846ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139676 Malicious code in auriga-eleventy-venus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2496a63bee7beb3167c28e31284ebf45ceda5dc2fe54d573431cd05f1daf2bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148928 Malicious code in umbra-npm-jovian-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f65ea012b56fdb0899a5fb284cea38652774f3b6d719c7ce1900fc6e8cf1733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141071 Malicious code in convict-cypress-lacerta-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9760f23e4293d7c57730048e52da340abf6c34e4763dd063f1121ace07245cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149036 Malicious code in upgrade-vuepress-pm2-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4aa83789c0e6a054547a1cf51bf16cf72c40d7b36e6ff05521271570800e1be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149047 Malicious code in ursa-centaurus-writable-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5379b0a5275af4c479fedd6a9b9d34b4460d265c5d39964e6c6902a534b3b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141271 Malicious code in cross-env-scorpius-octans-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4011eaa486cbc130107b6c5b0293b7b15c8a0a58eb271ce30dfad67d434e3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145345 Malicious code in nebula-janus-parcel-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dc02b3853dcb408378255697f28364b8450c949b8e88a32ddda404c5b41fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141945 Malicious code in elektra-draco-kinetic-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835c5c46294da48232131572c21f92bce8569b7fab18a506b14de16c645e61cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143759 Malicious code in izar-mdx-csrf-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd48dce86c37a361649e24f14a11f5ae82095ea0c041fb843b7deb540d94869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139699 Malicious code in aurora-fomalhaut-ultra-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d7ecec8643a109cadd6acf1e6b57bb5b6e6de1b9db44d09008867658c37908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145708 Malicious code in nuxtjs-init-ora-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2ab6c5f5d4fd61ff340323ee7b6c92a0edd0cf2bd80b30171d84397e7304d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141495 Malicious code in deimos-gulp-convict-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82800254ff99ec92da273a62b425cf6c2d0e2c9bc1c238bb30e856e0ce4c9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139360 Malicious code in altair-promise-castor-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141841 Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...