Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18afccd285374f9ada3168fbd719d912e5bd5deb70f888163e90a782cb3e52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-query-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505950e51b56d621a77add998a0876538ff548e95b7af30b6c58c1158b1a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-spawn-stop-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb47a933818775e5c62b8dea554a34249eeb42e01db1355d2bff9c72fbe0b567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-got-spectron-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f999588a4cb52296bc68b50e588cdc7434b2f57827ce86ef72b7bf111b292cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-lint-staged-janus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22eb79f93b9b093e3c75fd327caff60581f9359d9ae425e9c6666ca103cd538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-figures-karma-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7e3a0d376b13715a52ff3847b5b8c3c11a9b9944d6df465841ca5029f962c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-server-elektra-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f35c26f546a04d9b762e6ae199d0106dda16bcdbd8037c492257f34074fdb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-scorpius-centaurus-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd95c0b4860dbb6693adebb4eb4bee696b2d9c115cda25ee2ee39158905c40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-rimraf-registry-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef71af5d791cc5bae890390ec31b9e882a22231a4ef3433e9d230f40bee5a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-helmet-telesto-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7679ea7ca27cc8b5ba3c2132e37b1bc1dbea0f92c14cdb6fcb9ce04322da927b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-readable-thuban-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbee7af91fc32c148f8c4a3e601df8ffa2dcc65f0b9e8a59b9b012f3e6ae5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-less-loader-schema-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781290ca38b5ec3e1d92269c19df4d6e6701a45b9ed9dc6da3617bc2daaa5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-oauth-chai-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48c54ba2e46e0cf1db9575bf6d04ad71d5e2ff725f1353c8b6b9d03cdf82fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-blitz-colors-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146930 Malicious code in quark-nodemon-geckodriver-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac4884a9d6ee83a9f636acd3035fea7547cffc09b81ff94b654ea8905ae27113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145514 Malicious code in node-config-leda-test-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a21f6351d5a2036a3bd77b33eba4565d2a5efd4c25ee98e9a3019f669aef35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149641 Malicious code in xenon-ariel-foundation-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154d686ffc4faf29ecd3c0b4334cde0d87fc570fce3cba8794a8fc683629e863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149863 Malicious code in zenobia-bellatrix-gravity-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c29f1918a6f636e7b6bd048f770510b7604e2b3c0b585ce4537f242137fda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147283 Malicious code in repository-transport-delphinus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0fdc46c42635553bfca3774fe744b2f18d608d3c3168032ef8cc6d1e097991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140404 Malicious code in carina-arcturus-standard-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c10183cf84896c7d9f2edd5f2d4d004e85cfa98549b914581cb501bce5a158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...