Malicious code in pipe-umbra-mira-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d6db8fd657c4038f6081c6e1907cb2c010bf9588b6e92d01afb9040760a43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-dione-juno-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a951b77c82df55f7b3fe4649ffc992bbf0432bd91321308309ec19464d6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-graphql-apollo-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f4f524b48207e104601e6b13d2a0dce840d80d495500feae7448978e6eb474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143371 Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145820 Malicious code in ophiuchus-impulse-google-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64253d98a3b179cdf618b13e89d5a5f95ef849bb79e9b3defa67808c704664e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142280 Malicious code in europa-mira-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42c23a78a815cdcdc0f318e8ec01bf642638a7543a0d29202b96f07209df1b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140986 Malicious code in commitlint-got-graphql-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0e5b4a97cfce89e6a9b2a47f4c4ad3400f6d303f0c4361be1512f951a1c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-sagitta-development-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c3ec70cfadd3ba402d121641037ebae16726f0afdba17e4143d9fb794b8635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140914 Malicious code in command-morgan-yakutsk-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da47d74a630343aea88824f76517e4580ba986a5308298ff9c91ea0dd53101f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139589 Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142106 Malicious code in epimetheus-repository-package-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc976d3ed6b582841dba0a53f2ac7f4e88026b21109e58de73df97556d4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145434 Malicious code in nightmare-envconfig-nestjs-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce283718877e46946175f033597ea72cdc7ff55bfdf108784806ef510eb5bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148865 Malicious code in uglify-js-apollo-cosmos-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a32d11266431e314e9672a090b6607b6769bdfc56b19dca1aa6f31063021a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143936 Malicious code in jest-testcafe-stop-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86d1fa573533763b9af0986cc9b61da9873c4d1ae1b54d6492b6273e0b52129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149343 Malicious code in webdriver-mocha-ceres-luna-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7a97f730f21cd4e2b8910f8c1586bab544db567eaa521c459296caeb2b0542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142538 Malicious code in fomalhaut-dynamo-luna-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b5a240a7c7f61dc0583aea5a0aa7715dc2ba8d7515b11841fdbe4c62140055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146769 Malicious code in public-semantic-release-ophiuchus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43efa420f5520b1c4782e97f3d6dc04b828b0c253e8090d825e2483ea4d02418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141807 Malicious code in duplex-duplex-nightwatch-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16340ab3105a683b811a149bd270ef3c551a0f53e6c9240bdc58022ed1215aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...