Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-carina-test-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fe6022b47e0d85124b6c567d0f3be7173b101b3462c07fdd908843e2284a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142506 Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2058169f40e2d8da83d235c589c131dee6270a5bd1a819b0edd9873ab06714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148990 Malicious code in update-await-uninstall-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71c2279fe5109fedbf05ed0de8e7a13f3135c71fca750b79602f5366b373ebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142519 Malicious code in firebase-webpack-semantic-release-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30c4a5f5b373e1253fbc5568dde92c8b9d95968be5db1fc0c7cd27e209803af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148935 Malicious code in umbra-yaml-castor-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e53c2c0b1919a0c25f37aa373c06dd37ac67843813cf33353b527fbbbcc899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149215 Malicious code in vuetify-mysql-lint-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e958a5bcca9ea2f84328c7daa526a389b859860b4d93dace6e50ceeaf6892e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149054 Malicious code in ursa-dotenv-safe-nconf-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6467b9bf9305267e3f19b3326675b76c09277824481b4e1fca8df8bed48f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-wolf-celeste-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365e44d466f6d5e0d49f8b799d76aad793d40479391043c1ea5114d5913e01fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-radiant-cypress-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-blaze-quantum-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb360ff687b26292e07146d452935db0438fa45682807cd664889d6edfda878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-jasmine-delphinus-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c400840aaa0f3615246cb7063153e4a5810b00912f9c95b0c0930ecb8c38cdd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148513 Malicious code in terser-cluster-algol-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ad9eb31e5a64d83c11a0551757ea0c97a5028a5f923f835b9280752613526e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146868 Malicious code in puppeteer-writable-blaze-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703192cac3036ff13d5bdc44a4e5625b481f7c3268d6bfd58fb3ed2c6bbaeb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147354 Malicious code in rest-metalsmith-phoebe-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8177a5231f64f91ad462497824a507ac608aa02801a73de1d55a927c0e339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145343 Malicious code in nebula-galaxy-aurora-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f293f054052487dd73afb9445478228a67e98095f859276268342d2d2dd339e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139005 Malicious code in shy-red-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136a6c89f41ffb43e3480e9e135af5adb06770bf847e4378bda22bebd5a66d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-lutis61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771d00d9af6d45420035e68dd3dad8bbb86221dc8d9b5098a22263525b1cc02b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-brengkes24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13056619c4f0161c1fc95e52e2f4323343aef0345fc2a875ddca8784fe79d6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-rojak29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18c9b1bcfd3fc37c4d611854b2ff6748d9e011206fcc89739c9c9edce6a9e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...