Malicious code in concurrently-subscription-zenobia-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f07782358ed6392ab262a9806120581fa555e342a3a1498ab8aded398757a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-jest-wasat-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ff76c6d38f816d4a403227d263b7b7b6524b10f5c705c9399882aa83327298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-jovian-axios-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49329d1c8108c8908b1f6cf4dbd3fd17779a8121cd73d24cc2d66e6aa25aa7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-jest-loglevel-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edf57c8e73260b139612b3a0dc1a3afaf7ece9e89c6141f32b134fff4ea4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-configstore-fornax-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7525e7a35862c20e4b39dbbe250f0d19fa5b731508ee0a7efd7eca820fa61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-envconfig-equinox-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d82cf644f75bfb47cbabc64615e3caa508d9bc4d7f83845a2ff472647ab4fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-taurus-less-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c2ef051a36bb0e4800381cf3376c8859bae31a8d99603d5442f10b560067a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-nextjs-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-uglify-js-draco-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26869fd77a392ca463df0916b836137bfb66b07bbfff340b495ad7e48b566e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-hermes-sails-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e952a6363545cacdbdab17a2bb4c64c953fc7a1614b65c9e1e5a18582cf3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-stream-express-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff343e869eea3d3afef8aa2d1b4b440a33ca6d31bae23e02944b00880df9f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-dotenv-transform-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8bc2251b0e9e448ee2693fef77c7fa881c2a5f852b1ebfbb70d8704705c11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-phoebe-graphql-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f68c04258710a2b6f395d4cf50b5517baaf63d917dbd72a928d9bf32e8bb1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147284 Malicious code in repository-triton-canopus-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a42074780f1f87ff450718d0cc457d9f648d07232d8b109f0e0217dc471b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141318 Malicious code in css-loader-tailwindcss-sadr-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa42d6992763665ae1b08152de072d9e124be886828924073dc84314370e78a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148743 Malicious code in tool-magellan-weywot-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff21943a5c6a762c7322a56b92c42ea054dd9db5fa7875e2395c6ad5b98625c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145864 Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0637961794bd6bed51e0052831dca6497cbd5dc4bf9819df4587d8c1fe9e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144294 Malicious code in leda-sequelize-pm2-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6c878fad16f3c94bc36a1465061235960e1dad3e2d0f0950c4459a35f53146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141605 Malicious code in despina-process-scripts-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfde1fa601c3eec22c025c031edeb243d99a0f5344dbaa7ec5e5caea3b93b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...