Malicious code in oauth-corvus-atlas-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea6397626f678ed2718693c793e7e8c9d14c88e40df83e6f5158ac589f021b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148347 Malicious code in subscription-airbnb-europa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93def4c8b79f60fa808459f0c3eb104c1782bc6573fefaa8f6a433cbee409cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146024 Malicious code in pegasus-dotenv-safe-build-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106c26131af84fd2a13ede22f176584dcbcea99e0b41cb22247d09674a890af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145738 Malicious code in oauth-yonder-galaxy-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d70ded952f8de2ce371bb5f64f977cd19dff957f0d3a4a8ca34c1c3a1bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149887 Malicious code in zephyr-koa-materialize-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64745d3cf97eaeccfe96114378f3aac75817dcf2d747b7c3eca54e7d2f8341dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149080 Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145581 Malicious code in nodemon-geckodriver-mongodb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e37566e323528314f2a0a3e9907ee8ce68065ba9a7899cbe3b363638ee7870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144201 Malicious code in koa-postgres-blaze-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6cdae761bee4ee4e8ae8294fde8b8c4d62a37e14f8b704bf9fa3dee5d856c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145614 Malicious code in non-blocking-loop-semantic-ui-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d03eaa288cc6f9553d625662d06e4257bf68ba16bb7d2e4880f8521db9e278f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149156 Malicious code in virgo-global-superagent-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8563f28a2a27d7861250bad8476d45d2682ca1232f97b8792980d923d60542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142929 Malicious code in global-despina-markdown-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4180b6a4826c11a8e0cd2c21acc90130fd2c3b5340cebf4dd04047aad34d46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146156 Malicious code in phoebe-link-changelog-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fed773ad62f38e8f3bd74b0c9bcaf7640090adafd10937effed4cce88d7a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144927 Malicious code in meteor-quark-scorpius-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43670b3cbb53c22e277552f1fa7674fd03d35cfb9fa471468f07fdd90c2e92d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149817 Malicious code in yildun-materialize-proxima-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad786dc16177a4cd5009a59ac2e5b60390ff2ed67a4972b4194d5e84a0b9a041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144826 Malicious code in meissa-pm2-middleware-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545972211a2bc326cdd56d631b2c8d1331eb9494e29039e8cdcdc3e098441ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146890 Malicious code in pyxis-terser-dactyl-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881621ec4d7106ed416450651d6195f7979fb834bddef57c7ba0760f7650fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143130 Malicious code in halley-auth-vega-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-yonder-mdx-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a05bd12471c26111582fb880b7b86a83151e218c40d900842b30e9e5b6c8b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-geckodriver-indus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a404f4f502807faf59f086fb270b93cb0957ba5be2459cb87729937e8168620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...