Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe659625c683b2bac25ff371c17bb6016e2c47fc03dd89440b7daea743e24bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-process-jovian-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab06500252ced0b44546abca0d6a540fef34b17a5c86c56d86b163c9f31b0527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-local-venus-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22bf1918955e77a8b1f54fbd46b485b07f0694956808f5b42fb3e55fed8cdb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-rollup-websockets-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5eab2cae9acca24156af3f848d3bce6defbd98a5ee9f44457b23ff0fbdc0e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-cluster-puppeteer-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ceaad475d9d955f6b6f6dbade90cab89f4baf78f94279c6647fce157b11494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-dynamo-draco-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159379b4e08c7c6bd86618d3fa0991dc921aa71fdd9fcad571592d2f5873fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-miranda-socketio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec621e6726eab4c97228945d899750c0f1ad4ebfd72f119c1b2c51100b87228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-apex-auriga-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c7d9c33c1fe060f13875ed63aedd8dceab8a256499a341f8cf222fe65488de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-command-express-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b66213e307184f45c99d6f5d88c283d343d707ed28fdcc2cf3fd36dc4dce28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-html-webpack-plugin-nightwatch-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faf112d9190685ca2c8327279dfd95f90d5ddf26f8a8c95d805f3662f4bfae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e146e7e103cbcdd39e76b3fd5cf858a075d921f796820be6880d0bfea79a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146558 Malicious code in process-mysql-cosmiconfig-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4955cb99431235505cbe59ed6497b1d38a001b5e13cc6d6dffea67900dd399d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140342 Malicious code in callisto-miranda-commitlint-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b34dc3e8dd56356d3f11ca37b5a7ea84a6f80b94cc36ced66471e8b1b501997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145386 Malicious code in neptune-unuk-fornax-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873c6d5647614d7f40eea38f0fe82b134d0919e794148e573a07e750253968f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149301 Malicious code in wasat-sadr-iota-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35975bf3ca8a3a235bc037354b66f796b3253ef2eb41b0b9ac029c56e4cc74ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144981 Malicious code in mini-css-extract-plugin-meteor-private-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7211b4171953c4e9f79f3fe9e5a6d0d27eb0cb456b57238fa36191cf3f046f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147800 Malicious code in selenium-changelog-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e61e6b3c79918629a831b886044c747112191f4f98adc035a01d44f116970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146140 Malicious code in phenomic-webdriver-mocha-eclipse-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc1fa8b436f5e07f403d4b7217a2c4f24e502c13dab5fe7573420b4b4bd8528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147578 Malicious code in sadr-upgrade-airbnb-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82bd40d74505d643d24b7f73aa5b7ecceb707e680b6eaf31a2fecd6cda9766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147573 Malicious code in sadr-private-cache-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725582fbd138d40610a8d39222319553a140c5435ccd2e0700e92ed0ba29ef7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...