Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe659625c683b2bac25ff371c17bb6016e2c47fc03dd89440b7daea743e24bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-local-venus-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22bf1918955e77a8b1f54fbd46b485b07f0694956808f5b42fb3e55fed8cdb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-mdx-geckodriver-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e66a65f7c92871312341129ec9fa61d291bde4e1563ac61a81dac4d5fb3e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1da336dd77cd89cb44218e89717c86254a1d963cb305acf62f650a1d7b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-process-jovian-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab06500252ced0b44546abca0d6a540fef34b17a5c86c56d86b163c9f31b0527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e146e7e103cbcdd39e76b3fd5cf858a075d921f796820be6880d0bfea79a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147800 Malicious code in selenium-changelog-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e61e6b3c79918629a831b886044c747112191f4f98adc035a01d44f116970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146140 Malicious code in phenomic-webdriver-mocha-eclipse-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc1fa8b436f5e07f403d4b7217a2c4f24e502c13dab5fe7573420b4b4bd8528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149301 Malicious code in wasat-sadr-iota-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35975bf3ca8a3a235bc037354b66f796b3253ef2eb41b0b9ac029c56e4cc74ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145386 Malicious code in neptune-unuk-fornax-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873c6d5647614d7f40eea38f0fe82b134d0919e794148e573a07e750253968f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144981 Malicious code in mini-css-extract-plugin-meteor-private-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7211b4171953c4e9f79f3fe9e5a6d0d27eb0cb456b57238fa36191cf3f046f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140342 Malicious code in callisto-miranda-commitlint-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b34dc3e8dd56356d3f11ca37b5a7ea84a6f80b94cc36ced66471e8b1b501997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-blitz-oauth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945e0902b08e77257713b7316b3c50f0ce3c87d1e8804b22212a53021f2df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-pegasus-hyperion-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418431ac4801ca1c3e59bc16ea36311a776fb671e6cadd82853c46ab9a1a6fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-config-prompts-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416d76dab1ee5c855fec1bd08f77080762c427bf97170b08dc63dfcd76b77258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-publish-carpo-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cd94f3729b81ded334235fb18dadc466b5abd53f0bdb204d86788c6d9c1941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-chakra-ui-nova-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5402bfb80d839e33636bc3caa425c4a6fcff979925d82401ba777c07e968c829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-prompts-spectron-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffbac0173e72b03dfdaa1457db6cf12a4c211a78ec79e788227d443bb8322c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144440 Malicious code in lint-ini-carpo-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710073126339c59eb7484057356e51e3da9dc45a7611ec43e102dada5d735dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149566 Malicious code in wolf-vortex-helmet-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b6fd913838bcf44c2bf7b0a7179956fb82c404889a6981a97c5a3154c6604a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...