Malicious code in miranda-hydra-radiant-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b95aaf98636cceb7379e4df4336d4d867d914021b5a92d636bba39ae4c0381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-nightwatch-jekyll-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5796729233de51edc8c296497cfcabae7b685d63f4f1c6a8c094d2ab4513ade2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-websockets-standard-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26f9ca9a5cd7e54f60d8828cddc1b5724b64fbd0901163e56ac696fe2cb2ec19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-postgres-slidev-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d1df68b6c3a3deed16b7ba403f00479cb352e025b7e61894e351acaafe0136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-karma-sync-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3aba52d0957eacf7f9cb58860dcaaebcd83e86487cc6f8cf730279da91a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-cosmos-await-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32003048b64cbf0ba382212601b68989e55369fd2e497056999091ee16297a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-protractor-bellatrix-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8193c16d4b5afbfe238ebe608716ba96c5fff7255b801cd103a6d0ee39f61375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-eslint-config-writable-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25b3952db8fa305c0c824b0b07cbcb4a584f3bdf7b0be9278b4618292ff99a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83514a209e4c2489491a7e5fa3f9da4da2466d832fb191284eac4fbc6f3b5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-vortex-node-sass-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c094899bbd95d818089b04e2d7c0142a8b8c41ff80d812a232392252e31bf0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-weywot-wasat-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290545f725cd279a94b1995f055687e9776c2b2cb77e25363e0b64b43f5e2637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-rehype-magellan-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cd795e4bf8a290dcb46cf664f3256b9bbe1c32d968fe59c20bea542a8a7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-vuepress-blitz-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559357dbe4c70791f56127af7365aa7834d53e0f4560598b2b3dd8a8df08b753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-browserify-yaml-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5520ce8e10cec277d3fefc983acdc1fff0ed1222ccab56f5b7e4b83689c4da72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-celeste-jupiter-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c205fa2d6d2d6c34d73678744fd7def89ad1b39c74fa0b3b2b31c6ac339b42e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-prompts-winston-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8d9301673d88daa55f7e71755ffdfb1c684e84fb6bdca24e668e65b18272ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-nuxtjs-terser-webpack-plugin-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122079d9ca0cc4f5bf4c3860f735fbcb36bfc6b3b7d1bd0a7dfed0b6c375c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146792 Malicious code in publish-local-typeorm-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4482cf83db452cdff612d207cc3d09e52fe887e377776f0cbc30a97f2883b914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143795 Malicious code in janus-airbnb-cypress-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef687ca2884d2bba22a48f61152dc867f2c3c8ac13c2de55b344905e54e3c862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148561 Malicious code in terser-webpack-plugin-yonder-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2b3d037e70244b804d90a4020e49f5d066dff3fbba1539e907521aa5f8baf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...