Malicious code in cressida-graphql-apollo-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f4f524b48207e104601e6b13d2a0dce840d80d495500feae7448978e6eb474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-terser-publish-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-html-webpack-plugin-izar-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5b12b6bff5a1d345f252be0db66d506247fc87ad6a553fc02b7a9aa498a52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c1914fb248efd5238e86553ad01dcc8e761e3df13dc3ba91bea0927460f079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-query-pm2-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00b132f0a55368d12101518326d44169793bbcf76cc7aeb0bd83264f0b0fb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-heka-loglevel-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d439e6d0efd318a80fa9c0aea306da0ed1764f4b7940acf1510246b972af2942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141284 Malicious code in csrf-gulp-standard-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ee9b278d75ff46b2a58a07825017782f52f5671707881176249b21328c2f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-grus-fomalhaut-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd88392d2ae94b49bc5758565080c4fbdd4026c05543b645b2d954d03994031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143423 Malicious code in husky-ophiuchus-despina-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c4bcad394b60823fa7432a1d7fda1282df8ef8ed4e41b5c7a2bab967654358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148610 Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146899 Malicious code in quantum-configstore-mensa-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3620184656a6dd55b2aace0ebf241f117584297c3f05dddbad3fa1bba28d33fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144974 Malicious code in mini-css-extract-plugin-gatsby-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8d6e129f1fb2b77342ec6add65d3ccbf071b23d65893e28f8b00c0c398047b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148447 Malicious code in tailwindcss-miranda-aquarius-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b2f9ddd15df74589ecc838ba8b684999addf1ad6470c0b239cb7e34e2ffbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149343 Malicious code in webdriver-mocha-ceres-luna-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7a97f730f21cd4e2b8910f8c1586bab544db567eaa521c459296caeb2b0542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145747 Malicious code in oberon-io-thuban-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e81b30691489bb6dc1477cfaf24ce6eb3eeecd6f57a6188f5d9eeb9365266f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146862 Malicious code in puppeteer-radiant-proxima-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce0b9b2590e4c2e349e77dd0b957048b4435e23213eeb949b63a60874d6d90f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144369 Malicious code in library-apollo-sagitta-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a145c3f36268692e8ce0afac7243096912fcd83420501e41bb6a4862e17a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144321 Malicious code in less-loader-hercules-phoenix-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2202e59bc8b6eb663179fec4b52bcb54fe06b2a33c3a4cf3344a08f559886c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...