Malicious code in cli-npm-postcss-loader-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66207fd0bac9416813a894faba768dc4da329f3282fe3826e0b88d6f0db7dc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-webdriver-mocha-testcafe-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97be0264b0bb5094af68aea6b2b3948642428c9ca9efd84ddf15d7ab02acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-luna-mdx-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634f9f8f23b87d45c52a2986d0a62793f1587cae17fed5dd47dfbaba2950f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-farout-sass-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5d9425595d1a523a7abe4f4f6cb677814185a26cbbe69eb2ba49c417075590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-charon-element-ui-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9faf39be3002ec216c07c9e7ca68ebb3371f6d58ef31de7ffe9ed15eb15cb823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-pm2-react-bootstrap-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d5bac178637bc480815d914746b942889f67c66d300e04b2109160a5ef251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-elektra-query-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500f63431257f1c06eeb57bdf809169a3a833961b9df76c544c642bbf00efdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144326 Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140901 Malicious code in command-eris-telesto-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666ea0249d126b4ef46d2141a771c393d1ff2c7876db21ce8aa957302f0de3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143031 Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139474 Malicious code in apex-castor-gridsome-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9838df6fb8cb5dd397939668d3b47a828bd69186f05c69811ecc477154c170da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146094 Malicious code in perseus-less-loader-uninstall-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0acd2d52c31594304a5cb4d7f1f978a7ccb708ecc08f763b3b072edd8a37b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147350 Malicious code in rest-husky-aurora-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80331c1c8333af04e7c1870dc3eca41af5845de120b7bea8a8a466b66e0fad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-config-mui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a2f5e06f35afd27b86c65db41de2cb42921197c2981df64ec4dd5ce3411f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148746 Malicious code in tool-nodemon-hexo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa746e12f6bbdc079d7d6d228cbf3b02d40db2940f0c331a16a721ac453d99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149556 Malicious code in wolf-perseus-release-it-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93298b7cbf597b2cd7f3eedeef73414dbd7aa907fda69fd74d6492e990167f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141381 Malicious code in cygnus-stream-lyra-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91d6ed1a45350dc66c59200a558dfd1805694304dfb26a4721875c058d4b0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142314 Malicious code in event-html-webpack-plugin-json-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875e00bfa3e1b4edd4e8060b916a67fb8cd83337e82e497bc92c17e79e411199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140994 Malicious code in commitlint-readable-standard-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee74897cb470305c5a181b7888799edaf5856fa3361abf88d8a8e2f0f78bbb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144100 Malicious code in karma-deneb-eslint-plugin-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca28c4630f7069c8ff7f629c225a8554f422bf681c109a76cdbaabb1cc4edb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...