Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed41735893bd2e6c37f5d184b83eee13799a2223968480fb1576efc6310eaf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-europa-aquarius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316a3c1e5a59dec9c0fb21e4d692b1f7f1fa2093ace060ec4a6bcca191b15035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-nightwatch-toml-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523f1820b440f49068bc2daabd47c83763d497296a051e9135e5bc7bcfaf32bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-pipe-terser-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b346e7180c776eeac064af2ee804e6e3afb1e9fb00242af926790c461827e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-ini-markdownlint-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65662cda736d980784b56270f444cf897c757c5fde067bd14ebded2277d2d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-nodejs-framework-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a0aea906337d6f6bc7a6439a9566fe6ceaa9a13b30010fcf3e994d9d76844e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147076 Malicious code in readable-astro-npm-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c647e05dd037905883f77cef6440b9ac81382f0ede90b58ede2e43bfc6a99a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142221 Malicious code in eslint-html-webpack-plugin-eslint-plugin-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b16fcf80a6746829e48a782bf7568ffbfc1b880338831e4f8a84ff7192a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142877 Malicious code in geckodriver-nuxtjs-typeorm-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2930cfb3b48567b4f11af36b177f077dd690840f10b74887c4e301a2e747b364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148537 Malicious code in terser-request-test-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d93cff86f78ba974b32c4a49a98e38139666c4e5f9eaa44ee82074c2c4ccec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142561 Malicious code in forever-astro-element-ui-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb32b73101078f30afc48ba9b5202a97f6b98b70d003ee7aa0e2098aa588b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145312 Malicious code in nconf-electron-commitizen-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c7414e208e7430f5a3b3b2c501f26ce402685f3fe6c97836993afba3b9dc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149183 Malicious code in vortex-hyperion-chariklo-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb0574747e317160ee377a0984d32a00b5da31f25184452bc5b52ba40041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143717 Malicious code in iota-cross-env-socketio-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f8abc8d4aa9ffa2fa444ea71ccde61df434e0d48387cefb28ef5183d25712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139139 Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139133 Malicious code in breezy_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa6fab2173a7e33e37c325feb876bfcc3a7690d12c4313d99bc2ca5861e5c27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139154 Malicious code in sensitive_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66410a0bc1e30fc0454724628ceba7714eb23da1d2d92889673e46b130e2946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heavy-magenta-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e0c8927e1efcec41bbca952ec4d9bfe454a025ceecad348420ebe101bf4a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-jade-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f205577d8444fb2d4bc284ff5a8f1aa9646913c30e54ab1532222b0143a154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...