Malicious code in odin-hercules-enceladus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57d036179b1f1465f13df5e058289fac3398ff3f11cd472e0c1199d10056a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-wolf-ceres-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed97b6ad1f4394f2f2fb590260d9b665d49322e8448ea75d7cb49a81d052790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-spectron-less-loader-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c1f15bfa8b9ceed404f696d7d67708cc87536091aebab7814c7dfc538e968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-supervisor-phoebe-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7f56182fb0508ccdcfa89d6395ddf24d4f32bb251f2ace9a58c29d899b8d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-superagent-less-loader-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0ce4c4cd3971ca1928b83707e7b7f8a876a743e69c4b1922ad58717b01dd11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-flare-config-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59148b28e8f70bd60c5739bb9087be6ab6dc606e8008e55e381d0e6c57ea5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-helios-aldebaran-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b09ce6aeea86147136a26374e3b6730a58b76a0aaa446c55fcf3459f3cb49e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142854 Malicious code in gatsby-vulcan-lacerta-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee152af5e0dcc5068bfc21b3ba72197064d1a82c2e97851c04f94b589799f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145245 Malicious code in mysql-farout-morgan-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17d6cca1564673afeeac69a3122e8b70e262fad2863a5d0639b1f4bc676a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141837 Malicious code in dynamo-sequelize-hermes-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e59e09926ad401601fd6a02322162da69959133ab0d2524b3a52697d3929c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142106 Malicious code in epimetheus-repository-package-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc976d3ed6b582841dba0a53f2ac7f4e88026b21109e58de73df97556d4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140901 Malicious code in command-eris-telesto-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666ea0249d126b4ef46d2141a771c393d1ff2c7876db21ce8aa957302f0de3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139195 Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149625 Malicious code in xanthus-halley-gravity-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2029e560f0f7c0132ab1ff4bbde7603b0ac509b73a32937e5180b71d67fd68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143937 Malicious code in jest-venus-fetch-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c734b28d4aee59abf5e705cf6d757d1ba1faa5d4ae58881d3cdddfb0b0d70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139524 Malicious code in apollo-quasar-hermes-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652e2d076c3ee69316f7b51ec59ecd9c44accaccb4af2c046cfab5c66c5133e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147561 Malicious code in sadr-hermes-fornax-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e987d54b096a7726f59505fb5fdf043aa1936601415eb013eb1bc52ad13ba607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139474 Malicious code in apex-castor-gridsome-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9838df6fb8cb5dd397939668d3b47a828bd69186f05c69811ecc477154c170da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142666 Malicious code in foundation-antares-yaml-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c13361cd8d538077dc2c193291919f1787c6e62fcb69632c5431036d2d5186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147562 Malicious code in sadr-hyperion-process-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf4d6966d2840923341cdba9ee04e56a003d53e675e76dfb1440a4e1b2c0800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...