Malicious code in library-chai-carina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-jest-wasat-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ff76c6d38f816d4a403227d263b7b7b6524b10f5c705c9399882aa83327298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143994 Malicious code in jsonp-configstore-janus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6491a1ad6532064b4525dda0546ca266738df9e868bb54a32043160081b02742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139303 Malicious code in algol-pegasus-fornax-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cd56da85ad1b157c8aaf46467c5c42f3a7eea259284a48f2e7b04f0741baf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139750 Malicious code in auth0-kinetic-halley-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d235ed679c71a9c92ea843e98ce02b27b0f5d8037cee666eeb409341bd9bd0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141857 Malicious code in eclipse-nightwatch-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0de3858c18672b89b9bc94035d6db8bcf216c001f9385e80ea20767b99f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142912 Malicious code in gemini-postcss-loader-typeorm-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26d098f2acbda848cd498a85e44bc66024352bd08b5b37b1056b8c449562648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148557 Malicious code in terser-webpack-plugin-mutation-mutation-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f6cd3625f88f87ec25dec35d3e27866fde2e123a38d30403db5f1abcf7846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141605 Malicious code in despina-process-scripts-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfde1fa601c3eec22c025c031edeb243d99a0f5344dbaa7ec5e5caea3b93b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139325 Malicious code in alphard-halley-run-script-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f9d77e7486f19b392694db7b12727b81676372ad5fac67df6db7cc8e333163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140464 Malicious code in cassini-epimetheus-terser-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d6d8fbe53d92208051c449b0c2589e7bf14cdcc34c85e706f46257023b1c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-browserify-yaml-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5520ce8e10cec277d3fefc983acdc1fff0ed1222ccab56f5b7e4b83689c4da72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-postgres-slidev-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d1df68b6c3a3deed16b7ba403f00479cb352e025b7e61894e351acaafe0136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b67d0947219d9c28f83df53a00911736d07bef071c3af1c08d8adc6e483569f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-fornax-ini-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe853f926b64f3ffe8ed1be352a1c5361633308b5d473efc4932804483edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-optimize-css-assets-webpack-plugin-start-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b11707fa868987c2b0a57652ef1ff6d6bfc66581bbb843458f682c7605a42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-perseus-hugo-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83514a209e4c2489491a7e5fa3f9da4da2466d832fb191284eac4fbc6f3b5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-eslint-config-writable-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25b3952db8fa305c0c824b0b07cbcb4a584f3bdf7b0be9278b4618292ff99a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-terser-uglify-js-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bca524c147bbb2c84bb99e0bf53400154dfe38d61b8b5fe6311f40c3c42645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...