Malicious code in luna-orbit-inquirer-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1773b79bcf4920d77f7bc458da9b860ad326f4e1dc7734ad67764cf5102e36fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-barnard-passport-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5193513bff47da06612d54ccf10245ba69adfc4bf3fcf440daa9eff11a361a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143615 Malicious code in init-bootes-radiant-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050a045bc10e41c3926121ea922e01fa47baa0f522d718879a886b21ba3357bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144587 Malicious code in luna-umbra-chalk-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6e8f25fefa4b6969ded389ac1cd313816816b4fca0814c10659984ec3170e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-cache-nightwatch-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ef7e26646978c08aed8419135ce66e36763fd4296013810cb9b553b4a84fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147516 Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141599 Malicious code in despina-json-standard-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8bd6b352029ad45252a1342f1a9e98156faac7a089148feeee497d82180982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141418 Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146268 Malicious code in pipe-rehype-browserify-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d69b84626d618a7dcbb56919d1de00304d16f4b5a4aa87afe877e114e520c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141169 Malicious code in corvus-webdriver-manager-vulcan-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5135e94b844719cf58de133a7f391313a0e7400a94f34c8c5c86d4ec1814d2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149206 Malicious code in vuetify-delphinus-rigel-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92fadb7b85c2e89b10089a57a32deeafbd27adb0fc4983fa35668d33e523531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-nashira-husky-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8239a6961f37959561c688b0fb1c1dbb97528ebe003447f8f0e644095e4de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-test-dactyl-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac07eed232bd602bb75c1b252ee185d4d14cbfb07298839ba8056d35a032c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-kronos-elektra-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34120f381757b55e7a773b70ae46151f71974274ab08bcc6382fb88fc45bb9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-non-blocking-mongoose-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea88450080d7164cdf4c38d5dac58f5320ab57cdd25d5d0307da65f884d7ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-css-loader-draco-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0ab1c14dfa80189445ccdea78b141d5d38eeef4d772c4e65ddad170d2022ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-triton-equinox-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13ee17a1a11f62310bd6043d3296351b281b50f31c46091754519d19a34fa87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sedna-css-loader-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ebf2af811d1202c068480a5d5d14bfd24d336da782807d0ce9b3dabb926499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-dione-hyperion-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650be6585d50ddca2685469d48a1b170c812e5febbd8efaf74b86549b042f005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...