Malicious code in auriga-triton-passport-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574f46ceb52ebd9ae387541a9853ce72395d9ab6442cc497745ea6bf12d08ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-blitz-radiant-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4348baf1f1458216d94dd1f309511cfbf0fdf3a496164b285479c6cfe65ca185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-sirius-materialize-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7235eea9eb78c21f2f744eaa8e26d1d66cbfc0176532ad5b81988fbcef7f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-perseus-sequelize-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a611aa258ecfec3409c67e60532f605f7253087d197c70a8d32c2c2f6cdde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-castor-titan-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8380998eb6ab5ab3193a5728bf932f73e6aa50cafd200f74fa9f30a8daf4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-duplex-sails-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde8cd0c4f31aa574d4d76669ae80f087cec7b7802d04beb5326c07dfc6174b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-promise-thuban-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e3a02378c07d03f9cd1d1ff333ce88e7406b6873a760e6af1912b105b1425a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-docusaurus-non-blocking-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fdab9b3209bc358b61efb8b106ce359d5a5937e4814e8bc1c5730e704cdc49c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-bellatrix-async-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ef429d9f796ffdace8a3f703b2ae5197b3a9ee8fafd196f82b1f31c7c80adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142588 Malicious code in fork-foundation-enceladus-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f8401d11f4b6874b1999bdf3f2ec8220a510a0e127d7d11a1535ebc1f3395e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144314 Malicious code in less-loader-centauri-subscription-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8358fbb12d3db96e025bbe6eda5a0ccc017c35f9a7f8dfc51a6dce33f9cd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141242 Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a773fc88c2d9b6ab604714c0d75d5111b14f44c40a5b5b8f98e02f191aaa20ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147496 Malicious code in rollup-ganymede-impulse-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4e423e4a8baa3cfbbd0fa2de90cc13372b6f2fee6ef4a79521af5809045b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143453 Malicious code in hydra-rigel-eris-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adef32e2364f5be0643d6106947034e89ec1ba298813e0586f30b5f14545fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147816 Malicious code in selenium-stream-fetch-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479f119c5107d1516e05ddb76327a4fd1f0c2d0d7b498d4f65b97ed857f87e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149244 Malicious code in vulcan-lyra-cassini-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be04eb363e087f81ffeeb3da0960053b654d947ebcd091091b9064bbffbfaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149462 Malicious code in wezen-mira-morgan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aced490826c2d7edbe824a07a4bbed1a8ee680171c14127269d06d326744906a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140542 Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149209 Malicious code in vuetify-fork-xml-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683777ffb6a0d2d4ffc0e742ec2bbcc49d9709fcb03df1612896d9e53e07165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...