Malicious code in delphinus-titan-ora-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574ba460b814adc0d47a4a3ca946af2191212ac6e38c8f1ab15a40554b736f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-metalsmith-apollo-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e7e51a83f23a65a177aa0973d2ad88d24a3da3dda667c7cf1f4228fbb52357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-acamar-terser-webpack-plugin-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d67598092c99278899708ccaf956db5b784f63e8cf0fea187c25b581869382a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140076 Malicious code in bootes-despina-capella-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149153 Malicious code in virgo-eris-cordelia-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6aae70f9a85170a09805294037f5b15256af3293503306536d38e121f985ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-leda-selenium-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e650671be0ef8bac882b4e76b16496a2ea7e4b69e60ff77dbd599a4079f7d705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-nestjs-heka-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4b4f01f46a46db96df07924ef3f869689ca6569af12e3d03bf1c55fd5e9340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-jabbah-magellan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-jekyll-typeorm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1c0cb1dbb82edbc1fe147d6a005c0a89fe28d1455f9c3b8588be5233ff4110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-elara-arcturus-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31c55e192550433235a3c031a4cda8b30ee9f66224b49942a341e0b5a126d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-quantum-andromeda-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd57197959c002bb3f2c34384d0d603abb5da34acfe5db2fadf10e630b6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stop-query-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333c2e6a26a046e467d6256e8183f02eab4cd2f94d15be31633cbf99abc6db9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-orange-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e043015e7dbc9ad51a628906d4382c4934aee4fc3185ab47b822fc934bcf39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ddc03246640b57d08834137a34dfcab466c5b1c042f58ac75c4974e0fc114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lapis49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eb77c147be35be66c3e732f6dba1cd25df8e94982e638b81352196232e62e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136710 Malicious code in rina-mangut79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8c3e02e95133bf49491462b4db13a6eec400f3b10ee3b3dcf50ac320904e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137893 Malicious code in wati-donat12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31889370495dc5e51c6d272724640c56438f4cc789aea6a156f6bda0ed22ed2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133674 Malicious code in galih-ubi84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d46cc2f6071635350c546fc52ccd36711cac55fd0a04f6256fe6261fe0e4d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...