Malicious code in private-phoebe-package-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982866fd39617ee1fce0dd6dd16c6ce9c1e10f05735ce609b8f0921d02c7995b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-iota-testcafe-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1560b6c8b722d09568f71ef3cd851c6896f97b12a95429813738ac245e8488f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-pavo-meissa-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e8b50a01510c3c6be8781d310dad533e91a7fcbfd0957dee87343c3186492f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-deneb-helmet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-resolvers-regulus-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409c9280aa687fece421d6f06022969bc704c4e4883823547dbb67afa933118f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-rehype-norma-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd213bdc423b2ab5c22eace93f80c095bf7484f442dac2efef9cdf02dbaf54ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-janus-solis-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d32b29fcfa0498839d01be9c4a856f8c419b395efdc5d9599ddc46cfb37836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-zenith-farout-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef2ec87771dfd6bbcceb4e5551bab71eb5acb0ee62571d0b97eb9ffd3c9e8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-concurrently-grunt-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90713be5a6b07f12ea3a0a3307259d9d4cca964d591bf7ce254508064f384e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-alphard-mongodb-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95542288931cd3d5d462529f222d90c0fe40a687de3fd60c6d1dfbfe0ded262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-zenobia-sirius-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f5376b0c0e0a0ff01dd8e01c3bab10543dba3f4dce47a2a2aa1524795a648b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-fetch-cressida-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-graphql-figures-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45612d2418157df1b47f3b420231aaaf83a4363bb4a5c2aa3eed9c095e71deb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140051 Malicious code in blitz-magellan-betelgeuse-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5f69b47cbf03defc947d8b791ac97a071f76257cf87a5173e97303e7d827ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146192 Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143221 Malicious code in heka-vulcan-spectron-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea1a1a2b18a20049221d02c12037daeee34fe2ade2cfa6056595b1945ad5a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140020 Malicious code in blaze-equinox-ceres-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c2805a9e6173d86763438b0da3f4653180b81b634a3827c6a485434b559067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145458 Malicious code in nightwatch-chai-nuxtjs-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d5d5ea2f7c4831b445a53c4b04bc94d73aba09dc480a3bb8fbcc203881eec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142470 Malicious code in figures-hyperion-selenium-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a73c967d261d802ac6e60fdb8f74ffeab4bddc6099683bc614752998614c345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...