Malicious code in framework-epimetheus-dynamo-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478efc3b4b38da17d0d9e7f57a3b8184ba903e348c6c29973c0d063a315656c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-chai-babel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d9f8282d541ec1f5afb3ae6868da6de795ba3b4d3ccfcd7ded668aa567b1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-commitizen-mocha-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3c9f78b8c8242cee364e3e2ea4760f0e8414e5fe097e2a049ec4986f542423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-auth0-xo-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b26664e016b9ce769434fbfbbce3b3a7ed799f42d2c8b2848fda3fa7fc2cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-frontend-jasmine-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd8b8ccab7799216be46b4cf2e947e5092a34b8055fdaf5a7de01224ce7b9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144013 Malicious code in jsonp-winston-rollup-plugin-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920b0a97c6f918e65d1ce8ace558061566f0a81e894ccd0dcee9efe5219f57e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139645 Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146189 Malicious code in phoebe-xerxes-gemini-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33161fa9148c66138aafaf9404db9fe1a48ac004158a880e9c8a02b1107ddc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148614 Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f105b3dd515bd0a46c837e65d9a353f5440a1ee4d2bb6b1800b64e2f8b2cb81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-command-hyperion-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f156f21864fd5b1dc51c70fb2bd714c8d2745fd6f37bd8a9eed2f326714484f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149572 Malicious code in writable-mongoose-dagda-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ac53712435c415c5022e9db0c005c007c91f0d750139977a5064767e5a3578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-ragi50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9d234924e40465d87503790599b44afdea527d5542b214c20cda95cf1f15f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6240c3ffaffc456b64be3d9f29dcc71a5aca779f67510c8ccb21f9554823d07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137026 Malicious code in siska-sroto86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e138909c6fc34c29b4f215641c88f044748c28ade5179c616b8272854c457f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132659 Malicious code in daily_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b627893a6eeab040667f9b1dc8fd106d0bb1563ab12b9f84c4f1e38d42afe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138334 Malicious code in yuni-bakwan10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5122051d36fcb22006b41c1aeb89e43847e7ff748b3a7a7db0d8c54c2cb950a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134831 Malicious code in kiki-sate24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f242cf71d8a58e0fe400122eb3635d652f7c7dd38e0219cd6c819327092c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-jamblang58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9589cae7d0bf073f5a8b06e1f41743afcb6f46f1f512e298a3d9b67aa5595a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...