Malicious code in hercules-husky-blaze-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed5a2f08116d37357f8074fb85d6e54dda19d5bef3ebb37179a4ab84fb0733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148092 Malicious code in solis-vulcan-rollup-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a96b0f5b122804f3f0847ff18d7c5f0863a146490fdf7fec20ee26e5c12a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139545 Malicious code in aquarius-phoenix-prompts-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf63d6475ca1bed3cc695752f666b267fc1e3cd535f07dfd26419bfd634965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145811 Malicious code in ophiuchus-chakra-ui-release-it-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b02906e9dec6236ba4177faf7870709eab530f6e8617c44e7a1a2b31716e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142737 Malicious code in fusion-jsonp-solis-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ab6db8e999cb39a39729af5903c86fcd6c5d1a9f6f9619a848337bffc56226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143766 Malicious code in izar-transport-transport-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618328e12b0ff637ceb1688683a924234b65fbda44e8fcb3c6a3ad3647166f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149464 Malicious code in wezen-nodemon-spica-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ff6b3eca8f27c52994004cd463f9db40fca9bf33131b79db34028edd8dd2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143377 Malicious code in html-webpack-plugin-xenon-gacrux-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8797f8c0a1877750170b218f6c97b2f623a50b4c2e852e546a045d85c3cf496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147740 Malicious code in scripts-neptune-sails-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a139c4e9108362a1529b5c9b7d2e6f453474a8e463160919d7e9de66c207f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145473 Malicious code in nightwatch-mongodb-subscription-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5b2015321ec71099b04e8f074d8bc7d0d19b06c3f2ed847d2983a3b28fa945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141894 Malicious code in electron-bellatrix-foundation-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ef845444cb41e42b4cec717cd866a04c8cd25e7b5c993699ac5f03bb16fbf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147238 Malicious code in release-it-transform-grus-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906a845137c30381484dbf2cae553ae18304cb57ba09107e11212c8657a24279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140498 Malicious code in castor-weywot-kinetic-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605d01f551afbf8089d533da8ae43aadc17b013cf9d50c733fa3813e9fe98845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145909 Malicious code in orbit-native-dotenv-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6466a7c07bc1e387c14393082dadb8434498342d6dacaa0eedd9b3b5050c4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145142 Malicious code in mongodb-vega-nova-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f5aede545d21e5540317b0eb62b4a423f1bb7705ab2a8f77a13e7438ec2ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-chalk-rigel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fbcc8a6d77546d8df2d30d0a77c57dca8e17f043376af5bbc204b5e38bbc3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143483 Malicious code in hyperion-link-request-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6316cef7ddbf73e3598d8729cf25cab4c23a141d69ad28be87212ea0eac28d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148782 Malicious code in transport-cressida-sadr-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632d8390f7a137232ada996173925b29157eaa43b6603af2eb336c152c78c735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148784 Malicious code in transport-docusaurus-markdown-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71956465a4a6b68fe33a350a15f7ba73656070132aa30b36b370922f7dd325ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...