Malicious code in corvus-enceladus-lint-staged-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae1829f498555d59bca2416201d75d19048908b4c7785ebcd0735c275c15140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-google-warp-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befc3050b341d286101261fec11b2cb358d3994e132344a3ffd96727445879e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112743

Malicious code in html-webpack-plugin-procyon-airbnb-relay npm...

Malicious code in antd-async-sagitta-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b06b3318adfe4495009692d720576dccbd81fb74b2e9c690133f67d70fa5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145477 Malicious code in nightwatch-parcel-cypress-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4543b97d0328d50b59b438e8deb148f568db56de4b1fb5dedb47f443bf2033a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146331 Malicious code in polaris-cordelia-jekyll-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141250 Malicious code in cross-env-csv-sedna-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17131fc8711034353c5ac3b56eab7429cb6eeb40cf5fd656151de8fabe76580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145905 Malicious code in orbit-delphinus-convict-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8c21db0ca3c2e3cdca7740c7b7694a527a0fa3c519ff73b575f380f1740876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141072 Malicious code in convict-enceladus-docusaurus-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b32a8b621e280e6ae91766209b9334a5f2c7e13d65c8e87032acf79b65bdbbab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148227 Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kue98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620a4e4b86a0538193d08940acdf3c867e0f27fa543be47424a33085a3de9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132656 Malicious code in current_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d54b5b2c772e76f6f43277f88ed5d636ccc212b46187e249b2ed7c6830d3e568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-tek84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a1c253578c15f92422cbd6615aaae12194074615e0fb4856bf693bb9a77b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135222 Malicious code in lisa-gudeg13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68da13f5ea13e96b68ae47ef1b243686145d7545d8f25ab9b6638985868c3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-sambalado100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18f5b79114e2df58768a96ccce82df427e99063c95396e432c3cfe9651616e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131910 Malicious code in ade-miemee57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d385765de160c7ff097e89143f9856287ab75288a9992fe64968a9c617457e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137578 Malicious code in umi-tahutek61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6adf25b64fb163151d7bb4da95a4825721fc854b0f8ed60c40a2638e7f4655b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-bika2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d402974b893d4e9dadf65e13b92b3ec9c90c9b59b0d30b49ed9fcf9dc94666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-gudeg70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0018bee052acf4c34a22927fd025afbd46c3c3893903c96473dfd5d1f17b7f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-kacang76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e1998ea853423761a4192fb1821085c48deac82a29661b7e3ac5105d897694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...