Malicious code in pipe-mini-css-extract-plugin-vuepress-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45b6aabd8e4e2de023abe040f64de12f1bbf276ce13c6d210d77d76db09891f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-rigel-postcss-loader-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe203cf1a0effbe1e89e7c7fe0afa809a61df05c8ad50ba9667b388e17cfabd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-firebase-enceladus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0ccaa43c4ec5a60f07af0942c0be08f1a9c2f1982ddbd6ee2481c161da909a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-virgo-electron-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e004185e6eb62e9c0a652221cda1897c258c819d0e8dc5ba761875333b52b61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-heka-shelljs-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1321402d373619ab428b9424583b9f795bb5713d9ceb5a919bcf553760974a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-hercules-configstore-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83c7c59ae73d562061dbf27cde47d80227afd7131763b615526a60ec5c807a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-norma-izar-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6202e4dd1c6acb703f9349e84d06f1a5c9572de5e85b4679f9f4475475283e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140879 Malicious code in comet-lacerta-config-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889402c35bba670d63a6ad381b3eddb7635381d2d40ca3e04ff69bdc22e701a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148233 Malicious code in sqlite-npm-uglify-js-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2637f91fadf4bce03c3e76a24e70582a9d288d9fa691552a311baf19c0f8a558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143386 Malicious code in hugo-dependencies-quantum-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b733dd45266f44ca4e71511724ad636361a874de871071fa370d22d4f20a608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144175 Malicious code in kinetic-jabbah-chakra-ui-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5f738782dd363d152db805403c855d082f0f118291fd3c2a9d542055b894bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144070 Malicious code in jwt-bulma-private-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6440b82a3e373f0f05f339f463a887f1b1c5f60136c927d1d72f65b011de2bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146507 Malicious code in prettier-stylelint-enif-ophiuchus-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1c36c7e8318e9c03ae9ff620c9c5629c7f9fa3229ad0c5cc87694ef5eae4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146188 Malicious code in phoebe-wolf-ceres-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed97b6ad1f4394f2f2fb590260d9b665d49322e8448ea75d7cb49a81d052790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-klanting37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03efaeff0e233c21a190da98c5b6a5d532a3c1caa48c962608528f437bf6024f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lapis91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db71292711417816fd5e9691aa1556f4717d687c1b13799c96c9c66fed392a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136819 Malicious code in sari-bakwan41-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0fedc544d177f2cfe84754fe34acb3df0958917be2a583bc0085600323d9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132132 Malicious code in ashamed_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bf9870c0ee1935d55e20edd4ded87ab78d780e0dfd5cc456cb40f1fca278cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132148 Malicious code in awful_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9093765cd2330de4c57d812bf1eb5dd0ca6df276e0012042bec59c025133a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...