Malicious code in deneb-neptune-pulsar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebb4537fea3ae4ab2a239289e78084f27c4fe58003d56783f02db600f205a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-scripts-scripts-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0409451d1fd539154e63a0e4b69cf370ab76eec634798644da864bf87004163b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-vulcan-transport-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d41e24e945045beb52518b6e682a15231870631f15e6014c5b9d677f7b405d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-mutation-websockets-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a95486272da0dcb64f02df91085552ced1adeb9b08f616af39826bb91826831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-indus-europa-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583afe01adedb5e8e87310d4449abc3501120532c4f3a755b7a3019810befc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-husky-cosmos-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ebb451c9b23e274e850692c02cbc655f875c2f814390198c1adbc3705315c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c8f5b34fb3f7d597c860a1710f27f46ff907e13fbe49cd8c36c11f156f9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-algol-websockets-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf4c271b9245edc7db96e560a7f0eac8b19470661cd7e26a2ea4f03bfba3554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-schema-norma-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed297aea32ffff06bd657cb24540c11c48fdda93ec9e7a04d4f503346065c10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-vuepress-aurora-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79fee7f700347a0df6713b6a5c31af9087e78bf571b35e0dcfdb79460bc8a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-nashira-achernar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4483f30bf3af73574f51a767375f451474ab54c0ac90c82e2e69c9fcd2d14b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-express-axios-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142367 Malicious code in express-auth-registry-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec068853f97580dd89c495e698ab8c8a2106c601302c5315c4b5fd9a753ce00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140649 Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140161 Malicious code in buffer-materialize-config-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18db55707488097b21f274ec5371d25d8c58b91c6586082978d0fb1407c73349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146918 Malicious code in quark-aquarius-eslint-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef150bf2f6492d4b3a11aa781ebcc8b2feb63ab32cb4e23d322a78ac538fc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142904 Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dbacc8fc1bfa1a561e8f8fae3f0884f286af2d6425eb54e8131852deba7f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-centaurus-writable-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5379b0a5275af4c479fedd6a9b9d34b4460d265c5d39964e6c6902a534b3b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148352 Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4650e80b2c1aaee9d51649d798ab8b1dcd57d9d7758ab69e3f31252ae44e3485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...