Malicious code in mira-cache-cross-env-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f84b23994bc74cbce26b47d6fa618ed69bc1cd0ffc0ca0702cdd19eb02cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-cosmiconfig-passport-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac3c4fb6f1851d954cfaae38164bfeb87249be82f97d7e6ba1552473a461f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-ultra-webdriver-manager-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add34f45e373dcd2f575e70cf18bc5a1222ee39cbfbd8e89b52cf8773ad1bf2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-rimraf-orbit-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8dbdb8fb598ace85ab132ab2e8e249b3b8f37c34607f4a50808f231b4d761e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-semantic-ui-iota-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522661629c144c726922f88e7442ab71fcbffc91daa5a123695bf5248c25ebed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-foundation-ophiuchus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734cc0e1a4fdbcbaa4277defdafd1411ff42c898978cefc6ce410b296ec7f58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-promise-odin-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02962f939958784843b6a0ec0e0006c8a28d63bfb1a39aef4e30c2ef00e89105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-local-airbnb-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5f7cfaefcaf380f86b20f812c3d5e97113bcf8ff0e3126e8cde3c38f434c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-enceladus-lint-staged-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae1829f498555d59bca2416201d75d19048908b4c7785ebcd0735c275c15140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-ceres-celeste-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952704ef7609dad642d9aa825a3fe083c766943a6dfa24ad1f0f7e2f82789bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-pino-electron-builder-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45464b5a46b17e6c9934e048d6028093975f34358fae1dfcb9dee7ea308ed9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112743

Malicious code in html-webpack-plugin-procyon-airbnb-relay npm...

Malicious code in celeste-mutation-private-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127757ab576fa8404175dbc8ff025fa35671e77dee7e5daf3268fd955b65092e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-sass-loader-pegasus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4582c937e56d01f391201e9c3ab543d08c5f1fefed78d980ff35171b20714de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-polaris-rimraf-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d7e5fe0b742c906a629ff41dcd30079db5c74b5bfaf1475bee365ca52b4acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-google-warp-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befc3050b341d286101261fec11b2cb358d3994e132344a3ffd96727445879e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-blaze-eridanus-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23f280c4969fd442a925326b4a70a71af391c3ca923f2f2784d2aeaec842b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-despina-galaxy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20baeb4de7139e23de09686c30c274bbcbbd52b6a4b6ceec47ce9c6ac321597c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-server-ariel-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab9456315197599ddcea0392f87eea221db5072caa463e66a4a04e562bad81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-airbnb-rollup-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018f16aba922389dbda464f65913f52e8ab368a0365fa9de3966b886be30041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...