Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b1046da97d6e7c83170cac3d306570016cd8e3b7315de173d686eb7a2bd2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-rest-xenos-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59d8633530988e6f0c2f5b25ba330adf84ea689d15e0e288004ed1d9bad46c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-barnard-materialize-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a191f03d0de88e41b68a22ef71a0a8b68d26ab8cd334dde584afdb34ce36af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-yaml-scorpius-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2496a24957ff71903a6f70a9fa37c5af9b78521998cfd57ccd957f3b92db8539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-ini-soap-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49eae2ca0c7684bc542e8a3126f14f9e1a4ab907103a7c6013ca9cd73841ec41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-xanadu-equinox-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff14de308c8079777a0324927098d34e99dc81e491c65b38f040b28688b3d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139724 Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148544 Malicious code in terser-webpack-plugin-child-process-bunyan-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4839b0d11bd49cc80454d892a0010eb13cfbad005fb5bf93717d6f499ff2dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148146 Malicious code in spectron-webdriver-winston-vega-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc6bf05534f02b480ed0ff958277495405277626318a639399b5bdf20a51899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-gravity-lint-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2c3b6fa49120a558082f3637ae6ff017bfdb3678f03afdc534a33e4e801d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-restart-less-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-request-triton-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62cb2f3006954823e7b08f5666c84828078218140f25f574396afddbfc06b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-regulus-centaurus-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af60b4baeebc6f1eb35835dfcc99efcff2726fe3992c0c7b2dd0d6519cc5551f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-convict-lint-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3599bc1a7467d1187d95c87d1bf5167564ec62aaf91e11c17980fd31d2f03c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-loglevel-rimraf-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07c7fb0a5770c3f5d2b17d7e71e72830405797fe2e6c21f13596cba7bd9a769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-configstore-mensa-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3620184656a6dd55b2aace0ebf241f117584297c3f05dddbad3fa1bba28d33fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-sequelize-canopus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c1cc3740c71cd71f7bac9770bcd2002c41bb0acd5e0084541c7499f78b10e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142312 Malicious code in event-fetch-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41d7ec23ccd2fad63599eec79ef61acb71decba3e9dc176f355979acc910918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-hugo-jupiter-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3835df72aa0206596095b266191e573693fa5db6c63e0c8923b1a9a347c06169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...