Malicious code in iota-helmet-express-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42282ed6206029f07bd399aba888e5b4efff6d0382970bd2d500ca5c6b392656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-chalk-canopus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-aldebaran-centaurus-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848c05467d4a74d0a113c3fa27e3891f6fe22ecb24978863656a14c2c6810b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142725 Malicious code in fusion-cache-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621eb24b99727465fefb65412655e97619b9b87c2400a9d7bbea63db7163d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145821 Malicious code in ophiuchus-izar-kastra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328a62d2bcdce3b83d55aaaba84a4dc4cdaf49d7d16d020310bc18f9c6672de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141443 Malicious code in dactyl-galaxy-quasar-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86057f9e811638ad1ceaecfbf45565c63cb2d6021f27fd1e67c878f87e002e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146989 Malicious code in quito-bellatrix-polaris-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0332c27cc5eaed2686c971201590aa7f14bc67ea3b5004f6f6a1d5b9f1ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148256 Malicious code in standard-markdown-pdf-lyra-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9734af3a6b4cfc3fe7e3af82e68cffb82ac31f0c0474818b7ab95d397e331d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148285 Malicious code in stop-aldebaran-sedna-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a1fe9878670df93aeeee8558080834f4d1995474c5ec713b4b52e1e76c27c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-grus-rigel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a756eb41b87e1ab320a650e477863fcc7edbdc9c4a284b3976c2468ae303845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-aquarius-pulsar-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e148e048a9d6ea1ef88407cb658357a67af0a8b1c711b2bd44299f67bf0772f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-prettier-bootes-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f089ecaec9cbb1bd421a44425822953bfd771c24aa342a33a0267b27dbd3e2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-hapi-css-loader-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e3895c78a71fd2ea5e6ab9db681efe43891f8ab1c3ea3f392a530f981768a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-canopus-ganymede-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6d4ea70999468b91a3ad1807ef42db3a6d96c8f537496bc146c46c349a200b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-cressida-eridanus-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3306fc17cb95846ac5a3a367c5869ade615bfbfdba0131b4a319e8ad4da9df03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-lacerta-fornax-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecaabf67e4ca63e7ed7cd2efc1fb0825c047c0992c99834e76ac9cc4bc61a70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-semantic-ui-halley-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5f63115e6ff856da5807899b948f1831d1affb3d4a957e556dda9eb71ac7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-global-gemini-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8c0435fe8ebe8a6eced200375bd614a35d9850b666688a3440d6800d0862ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-markdown-oauth-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b3aebdea90601592663add6a87ada63bdcf39787421dd0f0ae1f71b1ec02f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-miranda-hugo-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d719f466203ac256381e61c67b5979ea11cc2ca7278330ca055096e9ffcd71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...