Malicious code in nestjs-terser-postcss-loader-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea7dc9bb5fec3e638d15d76e199ee6a1c671cd51e20914ae74fbfcf10853450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-quantum-xenos-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cc94a96e01810e6f1e5a0431edd2b630787a1e5d54a45b4791f23add3dc17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-xanthus-websockets-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ed8c68cd57c4176e6cba9e6be48d70bab1314adc77f213fccc63db194af483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-umbra-pavo-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e788159d5cdde745fac63f602d0b042f254755399403148b9b0a294251a3b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-io-quasar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463aa37c4b880fa305a254100385206be26e5f5ddb3ee65314eb015fdfac0cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-europa-schema-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e0ac5335d8a14ceaa0793d3510ab30bee813f977061c362f79ae7b989ccd60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-bootstrap-draco-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4026d3b059ea83042ac7c4e417f310271161680afdec2181530d17ebbd4f8825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f082e8e688e52330227d64ed4159b14898c0941aa30e28c8b117a0b64445ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143155 Malicious code in halley-mensa-prompts-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855e3f107c149e03bb867dc4f32af1a5ac1d3d7995590bfd0e43e51d71189212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146307 Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-prompts-jwt-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c5591b1f156b3719d8f31d98a00071866e36084c212033dcb994b4a06cbf05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139441 Malicious code in antares-spectron-apollo-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc69a052d9165b987f2a1a60e824aac161b9c771d669f25ae8259267dc1d7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146306 Malicious code in pm2-polaris-izar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2017a3ae26c79c8d8cec18b8eb5abc2c75ebdb6abdc8a7e819c9144856f27d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144862 Malicious code in mensa-readable-nuxtjs-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996539962812e89f55620996e24305e3dcbcd5363dcbbfa86f32540a8183ba45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143515 Malicious code in ignite-izar-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0894c7a3eb9e5f3c158e630bc71fbdb660de946d7d0a92955c82af30adb08ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145391 Malicious code in nestjs-cressida-pegasus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149812 Malicious code in yildun-dynamo-halley-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b626362eeed55bae9bb863aa98c40db9cfbabd1af02b8ffe4a9ffd65fed432a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142312 Malicious code in event-fetch-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41d7ec23ccd2fad63599eec79ef61acb71decba3e9dc176f355979acc910918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142560 Malicious code in forever-apollo-oauth-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90943887c088c5605934a7f3eb8800f69d5e476dce2f64c9ae90f658706a9516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141299 Malicious code in csrf-winston-koa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f85b9854a02f42fca44b893a5888ad42de58c0c48b4f4c21de2c867fe7a5bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...