Malicious code in upgrade-flare-delphinus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956297c6f1c0ace19000d0b1b21712bf30dc8a296ad24a20dd6af80560aee5f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142975 Malicious code in got-aurora-altair-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d68a0461ad4916502c60d7cd2211f6b03c381ea1d81803a7a2a11aeaddc820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141590 Malicious code in dependencies-xerxes-gulp-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca524df6fe30d9a679a3caf1797ead4065707ec93bdd4b4321abec7aa38cffdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-spawn-miranda-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83962d261eebbf4ab11649fd1ce06459f1df6412b49989eeb3d2328aa7889690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-cosmos-less-loader-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d1e0c7e7468aaf6e91a9cb8ddb5c941f752d7608947ba498fde057da170240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83514a209e4c2489491a7e5fa3f9da4da2466d832fb191284eac4fbc6f3b5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-chai-carina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141245 Malicious code in cressida-soap-atlas-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa32ebdf6c7a36c0fbaa79db2bb78384213d5a5f64c6f78fc4f2811bc97f85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144158 Malicious code in kaus-vega-oauth-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eccb7ff3878e6e3a8763872691dd769cf8ba2ee0a73255029d37d5963dd2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146641 Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-castor-stream-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3868868461930489c674de57569f0da76864293b834ad3f267fc02caa7689083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-electron-mutation-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452f0da71958284458308f2766fb474ed2aa1c1d6740f3b92cbec0f8751cade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144437 Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146510 Malicious code in prettier-stylelint-miranda-rollup-plugin-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563f06ee953a2d8286e275886aa2cf90f60e513727cb95779a33a34b5023997d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142092 Malicious code in epimetheus-cors-rate-limiter-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a36585cb0e9470e30f7a4cd1bc052fa0639c93ff28925fce131a00d3a5f4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111487

Malicious code in magellan-concurrently-markdown-less npm...

Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75171bf41f9d6323e8da8690e976b0fde84e1b27555a35b0af35e961f43f6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-miranda-element-ui-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478640b4176788ec26ab2af3eaf3a84218eefd1aacee687df057a7012d20be8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144652 Malicious code in magellan-module-apex-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e15094c400bb1335ee8b3f89fdebe6f60119b6f341686a2399533da98c0340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...