Malicious code in element-ui-lint-staged-apollo-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7663ec121540f855126afa6ae53b512cdb1548d4a95d3abda120df66dfd982c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-eclipse-equinox-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d12da5b6ec2aea61ffdd55200ca99828c12b9cf613f2732780c089bff606e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-winston-jwt-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060b575529075e328bff1c8bb906ea7952c1952b5ee9251977bae0c8fdf4f543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-despina-ganymede-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08487eae01616838ee0af25f1ec0f33d36b67a802b28b68bd65cce837dd8369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-nodemon-electron-builder-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd4fc533ec723fb7ba42bc781479f72f08c672242f24a09e80136673b1b2b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-sync-global-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-test-less-loader-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7e8a2539b21130591ea1153b93e93d2c8cf2018869f731d6cafd01ea8f9675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147461 Malicious code in rimraf-vortex-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38ac0ee46954d7b993079acbf423ca421753c5b7c1f34ee247e3328be09c172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145397 Malicious code in nestjs-google-websockets-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6048757c791315828cf6fd6fc888bf6104dd0e50d276b6185244daea12ef11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148115 Malicious code in spectron-dotenv-safe-titan-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e48c87ef5045bc4ffe85b3fe5f47863ca0f4efdf3a56a18800accf41a3c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-iota-oberon-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76da6faa946d065f4b6555f1dbd8f2d12ade217700a85abd775c10b71357c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-exec-sedna-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c197068d113d6fb425ad560ce788a7d3859d52375822f5b3b1355ca92c26473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-jovian-non-blocking-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f63cdbda71e6348e3fa77a13ab444871e387aa663565f05d8a08312ad11fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140578 Malicious code in ceres-taurus-quasar-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7528419e46c0d12809177e0fa4d0f3c6134f6880835bed163f9c24fd3a11cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148258 Malicious code in standard-rimraf-phoebe-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234b67294a0025692db16e4ca6d29b66713ad714b9107ebaac5b7d9fbf2fca22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148979 Malicious code in unuk-despina-webdriver-manager-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e0a13df6ef506e64e146b74c4eb6c52626f109f7794a3ddc8150e695338c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145129 Malicious code in mongodb-grus-despina-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb803ca4e42703dfb4576e1d080b3184c952880975f29de14f49945a4552af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...