Malicious code in janus-ora-odin-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b1a4c7e5407ea07e12997e513d73dbbb0613592dd22ec25417ed91ee6bc5ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-aquarius-selenium-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e5c2af9e703d23e07f831f6ce27c38ee3fc7977eb88fccce182c8f6d1b82b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-kinetic-halley-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274a41db0eed5d4a117b9c311d74680cad370fa7450d02ee18f04633332d3572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-chariklo-jasmine-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afe9386e40599cb48ff675289b6a309d488a323951b6c444ce1455dcfa503d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-venus-exec-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9834f191e6973ca933792bcd792d09f9f84d657d97d0348de6e3af16f84fc6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-fornax-parcel-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4428990b52194111194eed7d777050d56daa9124b291ecad8271bf7dd940afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-xerxes-gemini-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33161fa9148c66138aafaf9404db9fe1a48ac004158a880e9c8a02b1107ddc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-jest-celeste-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5302a6da915ba69b2ef4fa60cdd9d629cec52485a615e36d82215554a1e685f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-terser-deneb-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e88e788e5051d47ac4462b17dcb5b384b0f924a8510c377fa0fa5a96a5a2d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-xanadu-nightwatch-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf13fd5923f2e7943cebd120d4e893f615243a7c95ccd364cc8967b8014252d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139619 Malicious code in astro-vortex-commitlint-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a832fab4734976965417e4c3c3987afcc42a99c3cf032927a927552d6606651c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145848 Malicious code in ophiuchus-vega-xml-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf5930561813e8034bf3a62617cd99f9c8522d2a4e61604426d8545cac757a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143150 Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149819 Malicious code in yildun-postcss-meteor-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781037424e40c3e85d31cc340b0d5d327af94d57cb6d47c6c7ca450d5d9c3215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146821 Malicious code in publish-vuetify-deimos-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d89e84ba3999cf4d7d7762e710987dfa5c78b6051344f073b857dc382f4fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140054 Malicious code in blitz-orbit-iota-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd3a1d77cd0b196ec4a386bc4b71b8fbd27406a4eb552e4ba373f7cd79eb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147243 Malicious code in remark-castor-ophiuchus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9974665bae787c95a53b225627dbad7b63f5036dde9ea0330b70f1b73b5aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140733 Malicious code in charon-semantic-release-nashira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1789d099d0d6d3fe818d8cd16de7c18e8f8e48875e2d04a981153d07e84bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149154 Malicious code in virgo-farout-cygnus-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f515381d2ed9b5123eae6a36d19639f2221e8136e2dc3aaa2fd13e12ead6baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...