Malicious code in postcss-loader-yakutsk-europa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3934a796437258dfb3b5a9dc6649a7c7e4471263fae908da9840c57120e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-passport-eslint-config-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aebaca9d83597eaa315d6064a074b23ccc4564c49240edf92a50d5482b736c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-alphard-promise-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c2d18ca2f3faec8f5b44d1646ac4e157f8fd63aa204750ef48ed219fceef1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-reveal-md-neptune-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e6664bd6d8e46486238cbd2c44ed1f213c9f314b38d2df6e99541218e3200e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-hapi-solis-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674bde158ddefba91c9d567868a8757a09867e88fbb79e9ec1e442218ce0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-hercules-radiant-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a24f39209acb3cb879a6ca05be744135816f6fe66160f3b9609b78e8449678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-astro-library-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef35db8d4a04cadcdd6e1d033c10b92183e380161dd5773465e45152621bf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-loop-server-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52fbdafc8156cabe53e445347a23008ec455f58a7395faf9b2ac5c1dcd603c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-galaxy-loopback-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe9574eada5f7856d57a924bdfe32e8ebcfe2ef5419865a35394d25b67e09fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-package-remark-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d28303a473c0b6823ee48af1ce091a49f265056bedbcccdad2bce60455ee7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-bellatrix-commitizen-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8300cf67a6d08ef996a5dd67ad197d2f9e90d878f87659c59f6da61608c421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-taurus-triton-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acc14dc1804cfa147694a6d92e847cb87147205f616aa2abcc4d79e60543204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-subscription-callisto-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9394c2bac5a142593132709358a31dad622842e119d03316c93ad3dbbabad6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-relay-docusaurus-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca0bb13d341b2b03e8500ab818c3218b88e9a070b490ea0f91ea27b367fc097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145808 Malicious code in ophiuchus-callisto-leda-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d474ac48bb6136b5f28eebfe39fb40bccfc09cb06dec1492d3aa0382d4872c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142734 Malicious code in fusion-geckodriver-server-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147659 Malicious code in sass-loader-algol-perseus-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77664b9a0fb1e6506cf3e5b1505a16bda73fbef3380e9fa57914417417763e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144750 Malicious code in materialize-postcss-triton-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cad24fc90b3611ebe78f4acf26d974be1fca9b6f1a37555a0267101d4ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...