Malicious code in mysql-firebase-websockets-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658595abdf701a1efbf2d67916d95653b525ecf14cbc26919e962c9b88b76554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-aurora-yaml-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b510c3be7a7298f8e915c26ac8fb7d1fe488f01e6a722f87091f00c11084ea3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-sedna-gulp-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c770ec13334189a45aa0fef3674fecdd3a537588a7da860f88556aad8ab09dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-xanadu-jupiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2f1c79ed3156189c294271f1e96c1d453e72ef5d6750d32043e80fb3f9a866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-wolf-jwt-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd162f05a085a9bd6f3d5eae4eb71f22530b58420b2769e141f54389dd035c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-request-sequelize-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0615cdf2e022eb8e309a233fa7d06b1ed30941236bf8c92a29027db49a27c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-toml-test-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49060f595d34dcb5a114d51fc4c0dc3e8e2fc6c1ebd98b4775fd760cdc0907a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-charon-server-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925ed6bf743b9330633d7e1b1686ade91f9fa24b0d26b3f6fe312522b3ac9d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-algol-adonis-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3843506cf065364f776d0586ca97866bfb170acea717abb5c1f73d6f78f467f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-test-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1172938e85e672a705c123845243e3c77d61349e623171947cf7b653919b6587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-bulma-meissa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0babacd4b2202419befcc339789b9595da99bbc780c6d678c8c4a17261fb6900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139722 Malicious code in auth-europa-json-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649df122b61a0fefdc081c4cf8993203d642edd844cd95389b1a9160d88043ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141063 Malicious code in configstore-rollup-nconf-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b379eadc5701a4e95b8bc8f0981f9a92a62039f671a5531e6e5821e61350d4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148792 Malicious code in transport-lynx-transform-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f627df8c289e0b003c1cc35af435b79b568976165f0a92a17edf2c0d94adb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144971 Malicious code in mini-css-extract-plugin-cli-quasar-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fab84b007bf18d2be53f34e9459eef3ed9c6f3df11ecedfddf8cb18bb4da19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141494 Malicious code in deimos-gravity-cache-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622702e688f2fb8e40276dc4b844a58c5ad13b3b4ca30106511cad457fa7130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145498 Malicious code in nightwatch-webdriverio-ursa-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d76a8ae7ac7f849a63b9935cae8929b00215be786c61e6de5eb442f344d4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143836 Malicious code in janus-slidev-typeorm-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81622a3bfb68436593cee4550ccd8873459ebb5f4d186618fbb90391442fab9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142088 Malicious code in envconfig-wasat-bootstrap-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6db8e4f65d41c200bf215e85d07bcac6f0968a2f588d5aa3bf006697614914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146014 Malicious code in pavo-xenon-alphard-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7356729064251cf2aab43e7651778d7d977d0c023051b5822ea676f32a6c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...