Malicious code in avior-apollo-oauth-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b3417cb0939af2d7ef1ffe7ef71b3fc5def7e905d096c43f0169cd5108118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-config-prompts-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416d76dab1ee5c855fec1bd08f77080762c427bf97170b08dc63dfcd76b77258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139180 Malicious code in acamar-npm-fusion-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d95af17c88ec72811f0222e34d822483f1989fc44ddbded8ed3780ef28b976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-mocha-norma-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcafad7150ac059d1088731e36c7e059264a25f901b0fe893009c275bfadc86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145735 Malicious code in oauth-jsonp-figures-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a6fc5daa675afd58f702aaa8ddb9c7219d1acfc6d3c64845b81303a29c9247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141420 Malicious code in cz-conventional-changelog-ini-equinox-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788666018a914e7519393721acb289e94c1dca1a7655b0ca4151130b05bee708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-nebula-ursa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e869b886c6b587ad65d90412d52a84099eb19a953c7c45b7087ccc4d3723aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149521 Malicious code in winston-procyon-cosmos-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5551dbc40563853d6ae0acd4a986d5c867b6b5cbaa8947773d0cb09ede006019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-semantic-release-eris-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0897310f2d4b7638a96531a08b14b6e2774efc0bb5cf2777926f172374a687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142795 Malicious code in galaxy-virgo-reveal-md-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d034c71ef9a2bd303536b3a128521aaeb01ba40650ad9fff9fd2ebbb812a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-polaris-publish-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a524a23adc66ae35233b4ac3a615980fc09742316f1c7489c455b6f974a061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-prettier-stylelint-cross-env-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791b1dc189284d27d4648571cf5f77f50d62b3a6a7d3d9030af59acc5e12c91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141388 Malicious code in cygnus-upgrade-frontend-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efd3889cc38715cfa87373999a9ac8a9bc9757e20af388aa69dd89fa580fa57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149856 Malicious code in zenith-neptune-puppeteer-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10a2fd2615539814c75993efda49b5c595a87b90f8e157b39f9e05971922a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e146e7e103cbcdd39e76b3fd5cf858a075d921f796820be6880d0bfea79a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140202 Malicious code in bulma-antares-update-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da90409dae49766f73cccce1aa6e68c01b0cdeb89095c307fa9ed01a6e3d9d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141071 Malicious code in convict-cypress-lacerta-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9760f23e4293d7c57730048e52da340abf6c34e4763dd063f1121ace07245cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...