Malicious code in sails-javascript-nodejs-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a17304e2a6bbff648b6d32463f834700b906ce3fe91ce25015d40c032aba0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-mongodb-elara-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dacee0b3a1644a413676b09faabee48fa2c7fe4cf97c5d529b7d48e2e12965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-cordelia-remark-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78d69895638b3256becdf9e96956dde010d6df9f3b7e9db4f285cc7873ba6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-telesto-eslint-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1fd5512ebe9aed61c95cdb2a46351fb6ae9e0896e25cb5cff408c9dbb7ef3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-umbra-mira-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d6db8fd657c4038f6081c6e1907cb2c010bf9588b6e92d01afb9040760a43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-xo-writable-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a988f0de965c3f72dc8524142cd72070b2d172dec3c81c688da6051723cacfe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-gravity-async-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0ba8537711e36b7af5ff37c1ab3ce3dab407117c7673478eaa700d75c5296b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-css-minimizer-webpack-plugin-command-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3781c2b35c32db7102a4b5fe53e960e27ffc3ebbe36d1de5dd2d10485b7201a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-altair-csrf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d12f9c3117cd64df99f3421c074d81f3494830740d567162b1decb6a9b9850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-testcafe-oauth-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac49830a775e6e52064295a2c04405b45053b0115212a36f284f54de5fc706ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-corvus-aether-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78819ffa548622865ca6465342d6402a8002cd352fa308a1e580dbc5f296c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149608 Malicious code in xanadu-resolvers-xml-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc2375af9b38294ef3748fce82c146b5e714cfa59e4067f7f9618bf41ea592e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147347 Malicious code in rest-exec-graphql-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e058454b52ff02631b84926bf7b5588d9d267001a3788c2702b7fbac6398f356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141095 Malicious code in cordelia-ceres-passport-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61ddd43b0b5a9bbf637daacd7159288a1f95ab53514e330058ed7713051c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145957 Malicious code in parcel-eslint-plugin-jovian-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fabfbbb638e1784f6712afa0d2fb5a1a260bc4611614939a7850fa327a2b048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148630 Malicious code in tethys-polaris-sass-loader-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac4872e3209b7e770135a6ad29adbac00c7d4f90525555a0e3aeb4fb833a1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142914 Malicious code in gemini-pulsar-sadr-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6beda36d4c0266c1651e7f0b36b409a3b3136c7728447a6ddd5d69b184eed849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148821 Malicious code in triton-pegasus-less-loader-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31480a225cfdb025681ed57730f33c5be84210ba940a9c5001e84b76619cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...