Malicious code in tailwindcss-iota-materialize-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8814d15fdbca9a55d84e73b3267423a3ce4f89f505a49f9cb4f368e08ddcbb0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-build-norma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11f854a4c15692adeee2baff8f05d8ac9ad20ce7c7f5c2bbeaea5ed73bcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144427 Malicious code in link-taurus-callisto-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9bfa4225d4ead498760ec989c55bd57640a2242e9e99afb115d92ab40d5a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148902 Malicious code in ultra-node-config-parcel-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29af01598b9218606d15210c2d0adf701d386ce92a2edc0b8179bbd099a3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147268 Malicious code in repository-json-pino-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978d0a10060a9f7559ff23ce30037fc4054b3b97f8c91146b25d2059d4a471eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139780 Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149243 Malicious code in vulcan-leda-auriga-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5086134f060f78e8bd2666915ded5575a2b0ac781abe295b75d87751eb90fdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142579 Malicious code in fork-betelgeuse-levels-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019cdcf865b6fa482e4057127c3724efff63c2661b5fdf4a6b48ab4086346ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149427 Malicious code in websockets-solis-eslint-plugin-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127e7780d8d19e0da2569909fab63b7acd7c8241049ab9c677f1c1aa30604d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148821 Malicious code in triton-pegasus-less-loader-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de31480a225cfdb025681ed57730f33c5be84210ba940a9c5001e84b76619cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141436 Malicious code in cz-conventional-changelog-transform-kinetic-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac90554ba04c26db8c766211102ee31b9b49ce27e14ea6f2e29a5a1bb870369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148627 Malicious code in tethys-passport-playwright-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392e586b116239c1035eaaaae1e6a2af0e52b68b3f756a432e2b33132296b113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-postgres-algol-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991c904c75f2daa11cbf3ccea2167b46a840af6a20f253a4d8a2b60fc1576445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-tailwindcss-dynamo-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0c39532693cc4e6a18279726a197b967b08a795b72a474e2b2678b46a3f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-andromeda-leda-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d681606daf67a025417ccf7f44946364f28e138f7b3d40db72ff1d37291961b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-fornax-centaurus-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f30755572e37c868fe80982adf7e0e1b3a3c84d267e86cf691003fcaaba7c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-gatsby-figures-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 861fb5329fb77e004899efaba3a94f1383f864ba21060609716072f58bf494ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-event-blitz-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766f03cefd972d44198c480800afb0ecbe61155b28ff37abf26a9d7aece78ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-sirius-phoebe-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628570f78dfeb10010f186a208895ac420fafdd984bc72f60702a3a961e268bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...