Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-start-link-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f11757735a5d98d1eb0e745a37506fbce530b534d155ea6fedf6397a676c837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-alphard-zenobia-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e8e9a7165f5f93e0d2ea4f71fdcc15e596029699a897d1418f935127cda681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-auriga-aether-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f82e60419a165c24112425c2a0eb8ff0de0e758fea71c85f94dc4322948d01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146157 Malicious code in phoebe-lynx-less-loader-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b6e9c51d8df792487558370f33d75af46a24800c3767d05e9a4ab2115d7011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147539 Malicious code in run-script-bulma-jupiter-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616dbb1bd56cb2d5f22936162eb14cfa2d9fd391f8e8f257f39b6f3cf913ec59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142210 Malicious code in eslint-config-socketio-development-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f4ba7bcceda7e6c47a55286d07be81507c98e76b1293b35e26b1670af017aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149623 Malicious code in xanthus-element-ui-webdriver-manager-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ebafe915aeb6fefc051e9c9f52dc18edbd9a46f52859d379987dfd6b8cbe95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145951 Malicious code in parcel-build-castor-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86d03db2d5330cfeba064e29e8c36f78fca0430be8e57ca4e45d5a6b398028b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-telurtahu8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceffbf3cd283dbf9c89952dce70be78df42a5add28e296aa467748d0ff46fafd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-bika12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f636e9f7db7cc26be7667afe39032d775333011e1537997e23c14becd340d1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132867 Malicious code in disturbing_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c0337ea2356d3be33c766212731673679205ced00fd8a2f98e565b64ae2639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137430 Malicious code in tuti-klentik28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edd3e57e9ccac90e4971c3fe2c3e98cdcfbb7497a55bc329897a53770c8cf85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132578 Malicious code in colorful_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9057f8ce5af01e40fa7eca02dc9ddada7a8d5dee420331dbe2daf473f3581583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137088 Malicious code in still_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2b39e2010d565a1dbff215b5bc8c5a42ca067fb71d7464f57f0a219c326644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tempe47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e95998a9fd51b9944968365c3f5c4bc7ea686e88e2d99e285792a308c27247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-getas96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d21cb6702e9d3f9f7667f14a3614ace8ca69e17d5eb0d796ecb1a8b51848b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lapis70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044cf9a56849e6dfa8442901970685cfb606914ecc02508c2069ce362713c6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4281f74328d5d7409b9de751fa467f3f411b228490eb2422a09135b54934160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-oncom67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe6b0d07348d35c423f14a447432cfdd8810878b03580e40d2ff40965ccc015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...