Malicious code in wasat-restart-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c669fccaa341ec62ffab852152064911a73868724f75a4af37737a8830674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-ariel-spawn-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345720f3836c37e579e5b4f65b8f3644211d05a83b66beeb0d435273f944b5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-ganymede-markdownlint-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f45a229869b86e2b0dfaa4ec720323de49cc23649bd8f85575228616c9843dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f2f08d540754dbc9b32830614d963586b1c8b2127b590941f2f7003486f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-achernar-xo-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a12a3d9edd9de56818674de53b88391cd2453fe22b06576d063f3b92e289a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-apex-auriga-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c7d9c33c1fe060f13875ed63aedd8dceab8a256499a341f8cf222fe65488de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-postcss-loader-typeorm-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26d098f2acbda848cd498a85e44bc66024352bd08b5b37b1056b8c449562648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-sails-vuepress-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2600fdd1db616c71ebd3fbd09b07af44dc86936736bf6eb4e5b68c0bccf269fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-kastra-spectron-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c735956c75064f9891f712046ee262e3c75e0ae2c4038ec4b4b938928e2991aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-andromeda-xml-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edf12aebde5c3ce7e57862217e21738abef833201537b0dc7637e4a1dc93d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142215 Malicious code in eslint-csv-galaxy-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd45e16c796e796ce2867f6edaf3c1ecb8afd063eb8315db7cf688fcfe950107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147251 Malicious code in remark-markdownlint-capella-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9166b3835951835342cf08b9670e0fdccfae51b57ad4dfa313de94f2739e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147434 Malicious code in rigel-magellan-dotenv-parse-variables-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe093cac103df96e3cf63a8bdf1cd5e9699d5cab258f8a183b4539d9dfcf564e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-configstore-lynx-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae63f9bdf59bd6c85aee247ecc80ee241e3e6ca01ddf21e3b29e53c823f97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141365 Malicious code in cygnus-draco-local-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8794f6d1882edfc2e26a48be8a5192def801a638744e65a731076bd27bcb8882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144994 Malicious code in mini-css-extract-plugin-sedna-fetch-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0f3136cddaf05ac4a7fdc9bc9a237997fd35ac94b4b82011b8d0573fd9cd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146629 Malicious code in procyon-zephyr-antares-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5fc30b7ed93f03ab4d474b9ccb3e1d273e2a48d3f0e8f5f2eaec982ddee396c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142007 Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7320bdb07066e0a567dc2a7383e4ee563738cbdd9f7bb0127ee6f78f232f2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...