Malicious code in command-nodemon-foundation-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bb7856d8b86303e4675407ea4fd7ad07065dcd9a5245aa12f3623b5f23df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-titan-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f008e3b88825c9a54a226f489afb5844e6528c5993f15a38561ed9d9583853fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-html-webpack-plugin-fornax-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b07fc0dd36ac2f8b8534fb761509e2d3361c8dd79267eae5cff266a8cc38ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-babel-epimetheus-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6934d4217eb2be569cadb70df9300a05b48f26a6c6f393c7cf46727c37171acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-init-pino-pretty-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f8344d04ae5521883f7f79bbe97baff5a334a93ecff03a3abc413f5a49e990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-dagda-spectron-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15da11dcab2c97a830321269d01c33701a2e1d1cff07879d25dcf563eb8a7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-xo-deimos-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61576b26cc1474af144dae38e94de3ac5b2ce86a3ce05623d73f220d871368d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149775 Malicious code in yakutsk-polaris-dotenv-safe-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a57e19ab1937184b42b470fef639f3354a1f7f637d15d6acba77b90c665a4194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140972 Malicious code in commitlint-config-angular-ultra-ariel-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ad258019d17cd509e8f6df52866f9c59c14140aee5a0bc52dfe9f6b0071a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142085 Malicious code in envconfig-relay-request-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47db78c95ae987d173aa06cd11ad9777df685935d01b883b22c230b76637f93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146937 Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145974 Malicious code in parcel-winston-janus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fa490b9c442ed1f763545052dcf9ce8a51b65c8331ca58d552ddb81ba2f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141701 Malicious code in dotenv-avior-native-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4165dc10ad42b1d39155548bc0cb91c1dddf403fc627a257b53939938306b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141365 Malicious code in cygnus-draco-local-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8794f6d1882edfc2e26a48be8a5192def801a638744e65a731076bd27bcb8882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149132 Malicious code in version-callback-husky-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d823b539f44960e3f001e364010b73dbcdcb7449320d72a3472268eb79d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145200 Malicious code in mui-dagda-loopback-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26eabb85f51c5683b53fc8263b96d185f7eaaa441a518da48c50c0d6bfac767d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144044 Malicious code in juno-webpack-ceres-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f77539ca50b4cd121834f2c9ffd7d72dc229c148b983939f45728486a3dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149782 Malicious code in yaml-aquarius-xenos-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cdd5782a7ccd2ad4094b243a61df1ee126983b9a2415a077d58e1353944f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...