Malicious code in elektra-css-minimizer-webpack-plugin-janus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a9b4d6033268f22c357f0c99449f28ca5695e9b6fc710c26ac26c5e3c0ed97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141790 Malicious code in draco-callback-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8ba295da82ad1827008afbb037b09bcea5cb007076459638f4ec6b024ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147076 Malicious code in readable-astro-npm-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c647e05dd037905883f77cef6440b9ac81382f0ede90b58ede2e43bfc6a99a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145410 Malicious code in nextjs-callisto-xanthus-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5059802ee759fc61e9968acefa0080854a8821babee19fd21942e18f11e36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147416 Malicious code in reveal-md-mdx-geckodriver-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e66a65f7c92871312341129ec9fa61d291bde4e1563ac61a81dac4d5fb3e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147843 Malicious code in semantic-ui-convict-centaurus-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177cb7690e3257e51d0d35be4fdaf3f3035da7d9eb4de02ddd3373e58cb79f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145831 Malicious code in ophiuchus-ophiuchus-hydra-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47788e2971989ebfda1e3e06af9e81bcdc202bc958dd8727b5529b76fd1c5c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143742 Malicious code in iota-spinner-dione-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b83bef8ea4e660bc19ddd7833865216b2297bac5083abd74540da72d493af87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142436 Malicious code in fetch-celeste-link-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd7a1846ff262e5c7b508f4b84abf81c837205c5ccd7d9dc7f3b32ee0d35ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144054 Malicious code in jupiter-europa-test-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e37cc939f7b9dd9e11d6abaf23051989e7581681ed85c1f58e2ad2e96a039d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139628 Malicious code in async-json-metalsmith-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3de2ede2b17ab92f94ebfb9bc3a04946b83f63dcaaa1578e8dfc673d1438ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143595 Malicious code in ini-neptune-mongodb-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0c9e74444c902e017c9e52faabf35b6437f9bdb1cb60b164fa400e544a15cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144219 Malicious code in kronos-grunt-sadr-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148227 Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-publish-charon-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a859855906fa5998d0602074884a3f159e91c73027f4acfd3770d9a1b8e1f650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148016 Malicious code in soap-cross-env-dotenv-parse-variables-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b40f5873d129b069dfc467889c169b7f6211558d921d9c795476d6c125e58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147938 Malicious code in sirius-ceres-fornax-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f2388b163e7ec37eda82704f0e6b2e1e2e914a06832c2410f70c506789df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143238 Malicious code in helios-procyon-acamar-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1c78fe3d841cbc1ffd9d974980201998e5adecf1b4254977630cd35006ef5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147966 Malicious code in sirius-pavo-xenos-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff38a4715dcb29d3f768ba1b92ea4fd7165a4fea4b3280e36bd8f66d64326d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143318 Malicious code in hermes-halley-semantic-release-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f4bf20a63aa1206c571e19342f1474a9c38e5a1ce3b738b8fa656461386a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...