Malicious code in jupiter-charon-concurrently-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb1a4b72f5e7dfbf46d2ec719a3664799804836dcce96db92b44fa905bfbef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-jest-leda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97bcabc2b8fcfc5de703127ae1c9a7161c8f7d69c0fd95ffbecaf28045c4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adb475c01b655934995cdcafe5af454454fbd4beeed4ca694c1c812cbac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-loglevel-fomalhaut-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581e61a3fb294771917013ca8905c2e2d9088aebd76a3cae499452e2fbfbd70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-juno-bulma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6614053958bd86019a824abe36f10d3563eb1d08f8fbff5801ffab3ed2686a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-mdx-parcel-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6a19028e86bfb9dcc6f5f0eaa284b5bcb2698b973e93782079cf771658fc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-dagda-spectron-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15da11dcab2c97a830321269d01c33701a2e1d1cff07879d25dcf563eb8a7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-puppeteer-got-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788ee5ebff473dad8df11e086642382331492615ac2e657a5d1576b67ab64f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-lyra-leda-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb780c8c954985b5ef0b82b4a8234f723923b792e3b06ab8a105705d67ef2d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-polaris-prompts-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ab5c4a923aa2e466ecbc96e0eac3c8a5009b0e4895c85f60cfa56187d7f5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-mocha-ignite-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6831fd7e73db6ab318dda20722139bff9649596d92e387563b666f0778dce4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-transform-grus-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906a845137c30381484dbf2cae553ae18304cb57ba09107e11212c8657a24279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-loopback-terser-webpack-plugin-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260282c7f1867e1238bd604cf0bbcfd10833a0a3d62ed9c36ba1dcae09ca209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-mongodb-oberon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e800145a0cd744f6884e1491601dd0d0e4bb5235ae6f74b6e7ec2fa7f61cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd4098cf7952532438e0fcee118c18ba0061965c413cfe88a091ffe48f76af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-flare-meissa-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e1be5e5c6b272a1cfbef32ed49dd078bfc10a5a9e23a99c657720858a1a921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-oberon-ophiuchus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9506fb8af6e69d81cc9b390422e08b9924ca80b759806594dacfce64b3786012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145219 Malicious code in mutation-configstore-fetch-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03369c8d6781994538afa39e60c16a4be39c7d489335f04cbb21563ef6487888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148116 Malicious code in spectron-ignite-arcturus-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02efe1bbb2a2449adec297c17d1ec80cfa16c0a66e9372af5fb45a925bf1e965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140801 Malicious code in cli-install-hercules-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449a5c8ab2a770e90482ffc3005699c09647254cca1dfde7705de5dde90523a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...