Malicious code in juno-antares-flare-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5bdc635e072a475177d4dadf2c9890985c9678f720a2ef69952a4feb3c3dc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-mini-css-extract-plugin-test-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12d47c46e0374aed5c5f7d4341c5a6a16c64a371572dcd61558df3ac91e327c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146662 Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efad6a2acd2fb00980910c0d99b6e947d7f3600072912f8b770551b9a22bf90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148932 Malicious code in umbra-phenomic-electron-builder-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424a9fc94db72e7f5a82ed92d95569357de700a247032fc96f8cdd8b81ec290d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148725 Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139503 Malicious code in apollo-cypress-hugo-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758c19faad9f0ce115ed507c1f4121e5682f2b0efd2245660fdbc2de7e4f9914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147447 Malicious code in rimraf-concurrently-release-it-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62a3d550574f8a05abf6d282d8cf72319f5b6ce6dfd100ffbf7cb35777ee8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140231 Malicious code in bulma-umbra-jwt-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b1e107a01795cb4e0333a5cd37929bfa63193200bef0f27be1199d84640f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139716 Malicious code in auth-await-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8e71b70cfd7083ba4ab77611a35180bc9e213d9cbc366918b93d2ba4598fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147436 Malicious code in rigel-module-ariel-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5430b6080ec3b26d7c4d27ebfc869276db25cfcba262c4909bdcdd3fc72261c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139872 Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1fc500675fae07b9a876c104374b27b82820a5d8bcfaad02b275aa0426a718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149822 Malicious code in yildun-rehype-javascript-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7450993f2ee006c4a6d5bd8bc981fba7295d59c3471a8aabaecaeb1fe49589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145571 Malicious code in nodejs-miranda-socketio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec621e6726eab4c97228945d899750c0f1ad4ebfd72f119c1b2c51100b87228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149284 Malicious code in wasat-css-minimizer-webpack-plugin-grus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bc4d6d32a3ad2bf2da3f04d696481a91223c21f09d5bf439ab6b67546f3d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140208 Malicious code in bulma-chalk-rate-limiter-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bbf56c33e1c969c874d1a9534c05a591a456bf9708031149daceb8627a3044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146641 Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-nuxtjs-achernar-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b194872f9972ae698caaa2de3e7002b21ee196dca833bc5546eb8a1e729b361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-nodemon-envconfig-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b669250f4fcebdbadf124c20bc3e4dceb6d196ae3e3ed41e89b7c18078c0ac43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-capella-celeste-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62504e796bd511f6ae8435cfb9929446aaf2fd1b492445401e5490987615812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...