Malicious code in janus-phoebe-frontend-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c37d2a1b88d64ce81d8305c6d62f9a615edc4b8d367f36f9756ac7f1b6106a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-init-wasat-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8431aae3cf4bfc929aa82d1fa1c88264a12e7a751e455259a574cc0e9a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-sirius-ursa-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66192a4c2d85e47773b11e7fb2e2aa20818e70a0701268640be7ec5ad95c09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139558 Malicious code in aquarius-vuetify-radiant-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf5f6da4af39414fdfb5df6e113ae36c643af521c366f98cd6777c2ee0b13d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149696 Malicious code in xenos-xenon-husky-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7d1bd50d9c8416602a17b688245f7351bd6902d344f1e90e6d579dad1ebfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140184 Malicious code in build-figures-module-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace4a46ede4b2472a3a7452145025518e5fa58a5d553c0f4d1cae8f61157b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148042 Malicious code in soap-zenith-commitlint-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edf0102ed5998d6e60cdb42442e4079415c2e2d1ec9e6a64a15ccf0ef1a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143592 Malicious code in ini-lynx-triton-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad36a83db4c18f6d235decadf06c6c601b0f3aa88ea21b13a2cc6f1809ea172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145832 Malicious code in ophiuchus-passport-process-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c83a55c2733615628163d24fea12ab6fe3cc3781c688f051cc3fa742a5c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143649 Malicious code in inquirer-hugo-jupiter-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3835df72aa0206596095b266191e573693fa5db6c63e0c8923b1a9a347c06169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148249 Malicious code in standard-ariel-umbra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f78b99517947736c3edd511ca3470cdb79ed23806f5e753f836dccc568ad8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-wezen-nightmare-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f411fe3942ef410ebe4f961f8f7bff70042805c1bd5079c6d8b2122db7e44cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-lynx-bellatrix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856a800db8c30ce2d2de043e462c1171f0fd09be9141a40dcf6d159afd069206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-carina-hyperion-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b434152d8602e936f239a797771f7336b090f32b8879902b6e3d50f8699f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-inquirer-nestjs-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf324a28088a6961749e1576aaf323a6257739fb24de793a90086859618f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-html-webpack-plugin-eslint-plugin-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b16fcf80a6746829e48a782bf7568ffbfc1b880338831e4f8a84ff7192a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147701 Malicious code in schema-zenobia-lint-staged-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ab3b7e3bfb60ff149b1b0a9bcdf4452c85f6e105a4ebdc330ac5e3d541976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140201 Malicious code in bulma-airbnb-node-sass-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05b2ac08868e6c7fd670b15b48fec5a3be342154aa5b9a86612c8413c16242a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142672 Malicious code in foundation-supervisor-carina-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b50b99a8cb8642debc3f086f17977ae108b50845fbb715a621dea9a9aa96ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...