Malicious code in ophiuchus-zenobia-passport-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eca8c97cb6ac0779080fceb9527f7442614f57c2e63e5ddc7208cc5d617a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-gulp-leda-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d2c7bb8aac395496ed655e8f59fd436542ab51bc56111fda94804abeaa8ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-commitizen-xanthus-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a116873bf32c289aafa5fd60f4935b886ca7e2741da3cc20430738596c680c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-antares-rehype-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f4046d6c01db6709f2ceda4dfa721a7019ccbdf0f7fdeab32c751a236d0cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149591 Malicious code in xanadu-child-process-passport-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd74c22d0aeaa7681ed0d073575724c68f031589b73e3a31bcdcc4eea9ef361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147476 Malicious code in rocket-phoebe-norma-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b96ee1261f193a70b7eb7bb78cefd12edeee6d534a331c98854f83aeddd3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146156 Malicious code in phoebe-link-changelog-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fed773ad62f38e8f3bd74b0c9bcaf7640090adafd10937effed4cce88d7a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142081 Malicious code in envconfig-neptune-supervisor-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9024daf7d2ad19f2cbb51c1254f5669986b0d773d1b79e4e55ba3ccf27cccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149887 Malicious code in zephyr-koa-materialize-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64745d3cf97eaeccfe96114378f3aac75817dcf2d747b7c3eca54e7d2f8341dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145204 Malicious code in mui-mysql-mysql-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089dc09fc9fb3f57c1f9e78a954418a64a29db65194c700ebe3e78748d414fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144927 Malicious code in meteor-quark-scorpius-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43670b3cbb53c22e277552f1fa7674fd03d35cfb9fa471468f07fdd90c2e92d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141955 Malicious code in elektra-webdriver-mocha-xanadu-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dc7b351cfdfe332b731cfc5e306c28d94acf928ec0d493c81b06328d944a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-triton-canopus-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a42074780f1f87ff450718d0cc457d9f648d07232d8b109f0e0217dc471b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-eslint-plugin-quark-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706839edf2b666a4f9ca7c829230ca1869eada44401afc05d260eec76ec24e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-stop-magellan-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425754f6af251723808e87b0e68201bf2b4a32eae0c5a5bf3b342e6f57b62f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-sirius-fornax-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e66b6d4c4a782bd1811563df45256c74e75c5d248ade83ce2ab284396724d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-grunt-lynx-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1ba9d3e7d79a9d0026ece280516128249ccf96c91cdb61c89adc5bf8d80487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-repository-parcel-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168dfe75d601a991ed88a1e2c0e94f4def5659781b663e517164c6fa7625a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-winston-sequelize-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c91203ffc4eaf0a77c65aea9d37896efad90ded7919815c783620b1c063974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...