Malicious code in gacrux-phoebe-graphql-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f68c04258710a2b6f395d4cf50b5517baaf63d917dbd72a928d9bf32e8bb1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141318 Malicious code in css-loader-tailwindcss-sadr-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa42d6992763665ae1b08152de072d9e124be886828924073dc84314370e78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-chromedriver-registry-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fb32193ca623e4ca985339273e09aca585d4284dffb455bbcdd79c457663d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-start-shelljs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5108c6eb4fe974479b148f8a7ca0b102bd58ee2cf874ab49721bb9ee4552d701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-dotenv-safe-express-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cea3b7c73078f287e22f895f9b13af68cee4ba61b7c950d714e05f780574fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-rehype-magellan-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cd795e4bf8a290dcb46cf664f3256b9bbe1c32d968fe59c20bea542a8a7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143386 Malicious code in hugo-dependencies-quantum-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b733dd45266f44ca4e71511724ad636361a874de871071fa370d22d4f20a608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144294 Malicious code in leda-sequelize-pm2-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139184 Malicious code in acamar-pm2-deimos-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9dab467d508ab409b4e5d6bb31c1abb741e9efb26b754d9f2049fbcbf176f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144303 Malicious code in leda-xerxes-farout-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0673ffb4856e4955334686e0e25921ea6b7a948d123da5b7e488cf720f135dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146487 Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59df9e16b1d88777561b0576f22280225530cc5984f4353928fdfe3d86100d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144240 Malicious code in lacerta-geckodriver-tool-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8ae917a5908e869976d6341f9b536915f6556c4e5f81dbad2c4dcd8bb32526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140464 Malicious code in cassini-epimetheus-terser-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d6d8fbe53d92208051c449b0c2589e7bf14cdcc34c85e706f46257023b1c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139750 Malicious code in auth0-kinetic-halley-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d235ed679c71a9c92ea843e98ce02b27b0f5d8037cee666eeb409341bd9bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145864 Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0637961794bd6bed51e0052831dca6497cbd5dc4bf9819df4587d8c1fe9e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142188 Malicious code in eslint-carina-forever-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f91ef5dc4c00f9832c98df57115357c304787af3987b4df8eb1f049d795218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149720 Malicious code in xerxes-slides-semantic-release-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9aeb4ad6ee9602aa39fd98035a3b4dc787423994528a4f7d5bd4c50c239de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd5cd6e4b9659fadbfceeaadabe8b3c137cd2fcd97adaff2f97d46e62e1459d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-beige-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39d17fbc05146727718b7183b415c0f030436b57c5c075c75e935bc94e645f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...