Malicious code in umbra-react-bootstrap-meissa-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf93686ac0c5d7e54ffaed0b8ea0486e846b54a3e4cf06bca794c4275d878695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-yildun-event-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415b4bae99cc9b1568c32a6c2a8aa3eff44332f1ed641713a550cfb1969e937e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-centauri-ceres-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4292f5a1b31a9d321a2eb9d21512f8235d0431796f54ab26eaf817f2c15b8d92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-scorpius-meissa-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039f8688ed4618719306a36c9e5c803751ab0b749811306decf282c7cdad2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-wasat-miranda-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d06b6051c120ca10f5da401219d022703a9a252a321396da1352869368eacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-cosmos-sirius-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71aab97e6d0aba3a01915d59bf857fdf784e8ac784530bca1da797ba9123c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-aurora-jekyll-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c37198abfa595ebad14a4918dff72d195729333be2f1385ab33554a1a5bbf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-quantum-style-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179bc24cc0846febdd1660ef9caea52e3cd7cc38814851bd94acfd20e3ed0568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-odin-registry-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eddd33c9381e7922614632b9aefeba8762c030dff0d88ac0c3d0480b7b7506e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-proxima-juno-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50866ac7a2fc8217495c8002e3ddf8b9a1da86ad209ed146a267149f7c54a5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-semantic-ui-query-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772e26511ca75d4e3293ea2926cbb7404b0e62d26f1a7aee402169932f39d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-rollup-plugin-buffer-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1699050cc592e2f8d30b48677a2a5a646c3a34aec6b04b98382047a46574ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-selenium-postcss-loader-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5c5ec2e9a493e1c1dfaca85430575b03a67d2f1baa1266b0db4763fba9eb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140929 Malicious code in commitizen-dotenv-safe-tool-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a398c58fa355d8d568dce0775167b9257cb7d5de6497c9866d0ff2b45e2259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145571 Malicious code in nodejs-miranda-socketio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec621e6726eab4c97228945d899750c0f1ad4ebfd72f119c1b2c51100b87228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-acamar-sequelize-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d953ff4007470886cb9390d415da40753ccb4bac042bf6d7663fead61bc4797d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-leda-regulus-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8f0689326fa30f2f33ca0e7b640cd54c8dba70d9fa36308272b06574817d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148932 Malicious code in umbra-phenomic-electron-builder-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424a9fc94db72e7f5a82ed92d95569357de700a247032fc96f8cdd8b81ec290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149284 Malicious code in wasat-css-minimizer-webpack-plugin-grus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bc4d6d32a3ad2bf2da3f04d696481a91223c21f09d5bf439ab6b67546f3d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146662 Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efad6a2acd2fb00980910c0d99b6e947d7f3600072912f8b770551b9a22bf90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...