Malicious code in proxima-proxima-relay-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97d2548e73f82f87cac820df108c3868387f8df985c364aa2b2070b13435a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-global-commitlint-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e439146265fc847c2ba6635b34bdf04eab81a50a6bb7b732c0b65b4b98dd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-eslint-config-gemini-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcc24c27025a5441e1c4b98214d4687b5681a0e5e0ffa0d6616f4868e1f2e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-galaxy-xo-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983d68e18af0c9e813a4c53e6575cb1fd6bb2c75a355ca8f5aafe8afad1b2344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-soap-io-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8f6b1234992cc9122d8dc53fa5c86ab2c85ba860f34355df6f2422a225026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-karma-sqlite-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16c0ccc134f3847d2a92330a4457c4e5179f87c348f5481d1e1a54bc674c721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-janus-pyxis-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf33b730729d4528a24e14f6d29c597a201ef03745edf8da5cc10dc413c4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-resolvers-procyon-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ef8b8f0982ee3179b95dcfe0d783b162a034338b46c0de996a09c6f4b3a577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-tailwindcss-sadr-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa42d6992763665ae1b08152de072d9e124be886828924073dc84314370e78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-eslint-plugin-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8918b440c334ac959b4a14cb31973b6672f8c32b5b293ca8a93e02c1f0d77725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-javascript-achernar-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99885415d1f36f77e1881d4d381b6f8d4fb2e2a0edd684a8de5cb5464fc9ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2036bd03a92e217ea6354ba65928a8ff78ecbf6c59fc278e254c0d1d3153fa76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-cypress-celeste-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5c53dec1016919db82081a35af487038c9a44bf0efbc9e39435f8f45fab812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-fork-webpack-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0a656f888ee66bf68cc2f29860a1f633ff328aba3cc4dc2a8fb36ca31cee15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-sirius-mensa-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39685b13c2f35a5acf6ddf1c578e4b18e9c1fd50231940372aed718a32f486ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146504 Malicious code in prettier-soap-io-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8f6b1234992cc9122d8dc53fa5c86ab2c85ba860f34355df6f2422a225026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147737 Malicious code in scripts-miranda-nconf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdaeed21936afa676f6e018d202a8cd6da145ff70e6679d211180c50c08c4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142972 Malicious code in google-typeorm-public-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe46e17bb922cf6b54c730f90d58ae9d373c147fc77bc4648addb1455e4fa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141271 Malicious code in cross-env-scorpius-octans-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4011eaa486cbc130107b6c5b0293b7b15c8a0a58eb271ce30dfad67d434e3ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140484 Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51232fa12f2d0aa1acb5f8f227042e036d7eab4c9faf1918109f2c1b887da57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...