Malicious code in postcss-loader-meteor-mocha-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9699c8ecd92c1240dc7e25526a80075be5719ff985bf60dafafc2ecb9a7ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148064 Malicious code in socketio-sedna-centauri-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf5c1589ac18e2c3471d0274bbd2f7da00cb75993fd0a325f908768672968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143949 Malicious code in jovian-hydra-chakra-ui-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11890f1057cd031f348255b194e3c7423681fc7aa622fb91bcc95d904fda02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144419 Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143977 Malicious code in json-nashira-kinetic-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc765289a745bfa7fb547425100b136323a1de12b213766030bab7718297c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149623 Malicious code in xanthus-element-ui-webdriver-manager-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ebafe915aeb6fefc051e9c9f52dc18edbd9a46f52859d379987dfd6b8cbe95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144325 Malicious code in less-loader-phoebe-scripts-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0453a8015b61b94e10fc0eae56409daed68846374d696e999e769cf556719508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142788 Malicious code in galaxy-csv-middleware-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a90c0ed8d48568ce28902e224b77e7b8d7911333c8d1ab524cabdb671285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143031 Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149028 Malicious code in upgrade-publish-helios-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b592e15a5d37c0cbaf384d4b59bc09831c02766fcac6afff08998bc65f344ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144200 Malicious code in koa-polaris-wasat-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9308af0ff31c5ddc4d9944685391f62a5939f3e0541b0893d3901030490ff181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142370 Malicious code in express-cassini-warp-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd22234b7a86537f1ae17969398bec86c8f6bda4b4fed0732595138012dbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-taurus-css-loader-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1060b9e17079460f3944481a29c68ea644a75300568ad7737ba2873706c99a60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-janus-install-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62f55865ad3583ff2538e038e4062ec8df240b1b3d96090545a4b0a9521548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-halley-reveal-md-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bc545e0cc9cb920011e1a91d885f625e749eb317a503a663ccac9a791fdebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive-sapphire-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8705622d2e95c427d985ce2f0095e7f02ba8db307ea6fd6f933ffefc6b1dcbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible-cyan-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe01ec4fc7dd208e4229b84eb5590bc6e46631dc9d794f2d09949987fa726f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty-crimson-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262fe51f2f95a57ac51970166f9839c2b98e4ad24658a6b040c460cdc46fac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138869 Malicious code in medical-tan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce259aa8c0f820704c5dbc6c6e654b32f6f71b2975d0027a982606e68105814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138820 Malicious code in juicy-silver-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed825045165dc249d9342dc368258f6d714bcc564f49b26d0e90bd3529fa306e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...