Malicious code in virgo-nuxtjs-achernar-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b194872f9972ae698caaa2de3e7002b21ee196dca833bc5546eb8a1e729b361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-postcss-loader-iota-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761b189a4162df26d5290b5c7b6135a292988ba9144bdf0b3d530d206cab2cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-leda-dependencies-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbdad42f05ae6cec01ed8b7b3e027c1b1386cd3c563a1ec7aeef9f8f1e1e54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-taurus-dependencies-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965c88890449fe70ebace8f5d70434f7e73124448645e16a637c60e57170d328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-nightwatch-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0de3858c18672b89b9bc94035d6db8bcf216c001f9385e80ea20767b99f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-jovian-perseus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b0a923dfb3778323f2aa7e9a296eca4f85eaa61df4e5575c5a388aa02f07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-ultra-centaurus-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c0db9ddaddac7633e63071583d00d82037f15b75a57cb7b68e460390a99a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-centaurus-blaze-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7981197a713419d5823cbf101b5139b2e460dcd1918363456293acc722e104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-nodejs-postcss-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-miranda-ganymede-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7c44a3f1f3f88459a634ef82210b6a54688f79caebaabeac104d6283abd826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143943 Malicious code in jovian-csrf-javascript-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b158ecf3d5415472585bcd086696d2ca6e9cb147c39377fb297a2e20d6a871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148937 Malicious code in umbriel-colors-vulcan-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b202a8c96f7d76eb0935699e3d6b8e34183dbda7d3dc4dcceb6096407e578437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145022 Malicious code in miranda-cache-relay-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c25fc48147bf1c6d99f70b5ca2cebb2d623c4e9b7720ff4dc0a30b4de084de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148908 Malicious code in ultra-shelljs-aether-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7346b040e81bb689df3bed542cce8811d5d73d35a48936f4312edb9d0c62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147004 Malicious code in quito-sequelize-spectron-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8100bdb0fdc2635175097524e7857e5184b12442b72b07a0a691b26ff19208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147228 Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2823e5cc4583edbf1a87933cbf7ef0bdd7e810c0ca8fcce7267e6dd14fe9a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141438 Malicious code in dactyl-cygnus-carpo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac45bb86e1d18560f5a8960328eabcfeee921c8fafb7d8f868d60bbdbe0ac1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139761 Malicious code in avior-apollo-oauth-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b3417cb0939af2d7ef1ffe7ef71b3fc5def7e905d096c43f0169cd5108118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...