Malicious code in upsilon-fork-pi-index-emulate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76974f55a567f0b9b70350fd1ba445bbdfefa6a623c5d9e10626436c7b19827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-prettier-stylelint-sqlite-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6521de9c655dbd6f20939704f17ffa28a37be1b632cc49a17cba0b908977d84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oscillation-leda-warp-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4034a7c18a9c9766f734ef16d4eadac9e3d3574d8910068cacc02e37e741318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185442 Malicious code in alphard-mui-gatsby-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb3005addfce76c80633ae60df973892cc0a170579a5315c529dcf35c96059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilmo-cba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559b0a68f2d567bbceaf75523b800f531d0554cda1c14d3947a701aad8706f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitale-irher-aeswadadeafaadde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea19afb2beaf894579b2bc0e2328eaf24c0780c5a1774463f1df91e1f6222b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181333 Malicious code in @akunsansan0/pucukharum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac703b0f240fd4c913c8801170626c600aa9c5d458b907c0332eac2ac94cc9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180481 Malicious code in teate-thy-sonic-hudfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbee838f9f6629b391fc7a88745160312e5d815f1108c24747e7d6d95d1ee76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180405 Malicious code in teate-thy-sonic-gabhim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dcdf2795f9a9a5b3111e851276b6e989aa282457c8968b366b233bfc5216ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180382 Malicious code in teate-thy-sonic-ficpel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ec4b518b42fbdf7d6547ebac2a59d54d92a4ab244346decea7680523b05b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180788 Malicious code in teate-thy-sonic-okje (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f86e07d70238e7b53fe58577cc736e76bf4f1c1c70766a0a00c8527d99eccd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153551 Malicious code in avomainah-frasu-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f25eb73efdc6a24c0fda816ad22bb1f9cc3d86ae4f86bb4867d8ebd9501f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147300 Malicious code in request-loglevel-webdriver-mocha-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fa227c4b682e4efbbf01ad0a3de65c3e135e1af06ba4b2149f3f53c6bfd3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140666 Malicious code in changelog-cosmiconfig-sass-loader-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a3d3ea8d49e0103a6025980fe2ddbe0f3fc5fbfff21c014343f67002004afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-puppeteer-spica-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49a3c927ec65fd58703092a6e2e828a1b898fb03af1f389b91fdb76efc5d67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145652 Malicious code in nova-browserify-airbnb-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b65f255f4a3414fe13133b5affd54ae1c30d0b4c6bdd824edf22015895b69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145760 Malicious code in octans-antares-ursa-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d65cea319abb6430e6df11d60acefaed5f3195819f12b93113c64affb4b9cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146254 Malicious code in pino-uglify-js-uninstall-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9e617966f95f14dfc7533b56c77f9f8aead0d58a5ada8990958634402c7bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142575 Malicious code in forever-tailwindcss-orbit-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4085287e53cee21a1b2871fc6302e58161bc1d180e0510e2232091f732f96c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145156 Malicious code in mongoose-jovian-perseus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b0a923dfb3778323f2aa7e9a296eca4f85eaa61df4e5575c5a388aa02f07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...