Malicious code in semantic-ui-convict-centaurus-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177cb7690e3257e51d0d35be4fdaf3f3035da7d9eb4de02ddd3373e58cb79f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-procyon-nova-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4634f3def88aa52f773325b3b73a38d6f4d42314962303a0e9dc8a99ed25ce34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-eslint-plugin-slidev-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0320e0d702a39f689225390ed9c2d557b760f8f092af53cc00dbb747f1c95c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-tethys-mini-css-extract-plugin-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dbc624650bc0b3834c7a8d66f0048884cd10d0c3ba1da0fb8be592def28e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-karma-hermes-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f90b05b302362247d64cd0c5a11bb9f4ee4e063a4a21e562f0357cc4bc8716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-yakutsk-tailwindcss-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25825cc6a045d46e8a6a37b1471e8c3cecd611ebb0c739ebb6da4d03503de226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-parcel-perseus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0ffe22d6274e2d68cbd8b7e0137a7cec73c28d054414aef976087863d26de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-terser-spica-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d06e1d74d0e755f921a537a0e0ee13bcb86925886eef5f4deae57cdf62524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-csv-hexo-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e4d05be8e2ad6f4fced8582bc9c7f7ba53cfa26c1b58a82d20866775f2c102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-nextjs-galaxy-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bcdd082ce996def33fdd212572b9582cbc25f6717782a182c5688ad39d01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-cors-scorpius-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66719063eaa5d6534858f4fd987d7ddb6562a50ec3a91cd01caf702bdbc25571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-antares-rimraf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93627bbc7ce4a38b5911bffd0a7a9060f9c39f63e3149eb715967d6cc7c40e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145825 Malicious code in ophiuchus-kinetic-development-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cead306982c4e53b259b7fe60ba0baf7a14b6ea52db778371e3b45751817ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142218 Malicious code in eslint-fomalhaut-lint-staged-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb105ce95665918097d4d61401177afe8ca59a34d9f9753e8c40e94ae07b8d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149662 Malicious code in xenon-shelljs-chariklo-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbac76d56e5ea533334cf5a8cd66bbd396bc572f97cf384097f8a2e9f791d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146872 Malicious code in pyxis-config-eslint-plugin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9039999becb8512da6baec8c9a9785c430ce5c276938dacaed4906dcbcde51d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139995 Malicious code in betelgeuse-octans-venus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571f015c46e84fa6fba8638064826f599bbdff229f5ad4a15ad7405eddb455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-fetch-cressida-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...