Malicious code in element-ui-antares-browserify-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b28d60f9afefbbf9290d01ff6e7f8a6fcbd00a269b5f91c6f21187516bfa63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-tool-fornax-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f8bd622c042375df8054a2714cc5559b394b0284100a27f4096c2744dab285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-regulus-xanthus-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623f738fdc461b8c38a39da3044e89eb5ded72f45c346f84c268af6fef85d9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-vuetify-antares-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a3e180e9f01360ae15a1ed1c0c54fcd8e78edcbc812170d9b376d7923c62c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-testcafe-koa-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ba567e6bbedaaba4579cca62d69d9473426445d875a51b7d5ba3fb7b433575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139751 Malicious code in auth0-markdown-pdf-jovian-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a5d051ed94e1c11e66965e997986b3294338b4d7ffffc9246f8156b5ac1adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145612 Malicious code in non-blocking-kastra-eslint-config-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6733a63686f84a737c0a759a95d9448142cd5dc89513c785f1f746ab028b97b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-schema-dione-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af9e6c2b2b4d710d8a1f6df5d2630dad09faaf289798dc90e320c66da0f8106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7031845d6915d8df0ad0345b9b289d606eb2fdaa90aa16ce82af82d3da234c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-callback-venus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54afa4fcb2836ea95ffb5db003dc4c6f9a022be7b0b74462aacc150cf13c0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-helmet-vuepress-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a0f227ecf5dbd238bdb4fdf614d28c9f11da0fb859e447e77910ac1e113f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-yildun-karma-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002463a9ef23a3781a6864d5ad3a340c5c545b7720c5f79a22a9477e198d67d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-morgan-gatsby-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554139500406b867d6abc54a5cdd58fd294ec3edad56fdbbece0f3987411862d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-sirius-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaf14e6e10cbe5a3b607dee0e7b57551519225a5dc3ef21ead34231d78cbdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-husky-semantic-ui-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3ccefa54c95c888bb821b615c7d1714b07731f815f4e005a557e282d65e25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142185 Malicious code in eris-vuepress-aurora-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79fee7f700347a0df6713b6a5c31af9087e78bf571b35e0dcfdb79460bc8a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-event-cosmiconfig-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b1de624bc1c101df86ed334fbb6c5575ad72d38d45302ba2c4709aff2df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-auth0-xo-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b26664e016b9ce769434fbfbbce3b3a7ed799f42d2c8b2848fda3fa7fc2cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-quantum-quito-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075ce8326864624245be5fb57fbf1901c47da14a12275f3443eda7cfc7e146ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...