Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-jovian-regulus-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd669443822a9bcff454acff3461792c5cffcb6131bca5956c40eb5ecd37e244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-node-config-rate-limiter-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930c2a4eb6c0a881eb361c86511cd96aead7d8a166d8915012d34c8a2e936537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-passport-sqlite-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5532993780f2898962fe1e2cde7c26611b691c63cdfb4725106159dde5a99bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-hercules-auth0-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0a8d0cd21f821220e7b075d93263b825737c0f630c3efd8dc80a94ba767298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-odin-kastra-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807f19146fb1323fc3397526aec5abed6b4f21c91a207e554c5fe63341877ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143032 Malicious code in gravity-xenos-postgres-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928cc50e6689771dd7021790880d27ee8c24b1425bb75d7acd7ba4a3bd17331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143370 Malicious code in html-webpack-plugin-rigel-heka-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccda5bca647ef2a6a8e7663d0c52c518824ee0fdb312fe1320b093bfdd154c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145410 Malicious code in nextjs-callisto-xanthus-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5059802ee759fc61e9968acefa0080854a8821babee19fd21942e18f11e36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146878 Malicious code in pyxis-helmet-dagda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3261cb1f33e1f0746cada1e1ec1fd231ff24c1002066248b2efe40915d70ff48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149654 Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145333 Malicious code in nconf-winston-rigel-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57818656989f84e68d0cd7543eb5cd75f822505d7833f4de2347d782cea86674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148227 Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147843 Malicious code in semantic-ui-convict-centaurus-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177cb7690e3257e51d0d35be4fdaf3f3035da7d9eb4de02ddd3373e58cb79f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141523 Malicious code in delphinus-leda-polaris-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6c18328bd4bdbf2c3bc3fc6cd547b636261ffdd43a67ce494a8b2953a26355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149433 Malicious code in weywot-callback-native-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf6401f2882339b208ef56c16338a6c47a298491ac9626bfcaf7d028652236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143565 Malicious code in indus-global-library-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd552bd8faaa141a7acca92b5937a48130fccf430c87326b0d9ebe7fd4dee40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147059 Malicious code in react-bootstrap-europa-postcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190857e6da478036668ce13c9034e9c2c0db6a2eff008b51a0e927f06f540e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147013 Malicious code in radiant-development-eslint-plugin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293c42ba0700755d809e0cffb5dd4eee0f25f2209932a17eabac567d484bb08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144432 Malicious code in lint-aquarius-morgan-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602a9e575ea97787e2315b95517cc650d51f2f0bf594adf1ade583b2e9857258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...