Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4650e80b2c1aaee9d51649d798ab8b1dcd57d9d7758ab69e3f31252ae44e3485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143444 Malicious code in hydra-hermes-weywot-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f42a1d329c45393542f9e8ec59bed9df73c594eee4af007134fa1f73d8b3b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-janus-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7173d4aadc73cc2abb8592799f4e82a48e637f593e78b5e8f51a5107f7e5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-cosmiconfig-semantic-ui-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5df92a7b90329406eecee7a3a400b2d62ce2844e17349a089b79a8fe5428888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-draco-pulsar-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78722e2d4ab57a71b6b7c575a6981e902ee8727337b994067320b77493c72af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-bellatrix-lyra-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf06a743d3bfbff016256aeb9587acce8f1f6000463f12b4a837aa3bbb48b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-docusaurus-run-script-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0005827d3b1e3675599308fd06a392bc52127f29e3a5222522c49438e4e5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-blaze-betelgeuse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fee5f7c3e2acfbe7402c84173336a1d9eb3ff7a298a28a3038a72366844dd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-nodejs-pino-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24968e7924be81b0a4de90c0dd069b7b1e511e2b7bd3252f1005da9c0d0dbe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-pyxis-cassini-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46047fa723bea944665489dc9ccb6b9f98032af680facf37378bc1086f485f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-dotenv-safe-fornax-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ae400b0640ddf9fcf4390f177967e895d9cdcffce66837c6fa60cadd3106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-webdriver-mocha-ganymede-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9ebe0367f6386af7a0bc4b075a8402500ee6371eeb019f4f8307ab271e7fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d40cca4431ebe10a20e76cb02d720527955bc8358a7289cd5744c41ee9d29c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-gatsby-yildun-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9176cc856a7e1b77aae4968733ab2bea8d8ddf71d2233a9e6f1ef1c0f9e0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147154 Malicious code in regulus-phoebe-corvus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0151e5068dc5bce9091a6d205c89061fe9513c7fc09dd31cd433c06dd39012bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144774 Malicious code in mdx-react-bootstrap-javascript-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e1744c55940a789327d9b33cc8d592c73c78aba0180a6c3d6f4db1c9a6d740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142185 Malicious code in eris-vuepress-aurora-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79fee7f700347a0df6713b6a5c31af9087e78bf571b35e0dcfdb79460bc8a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...