Malicious code in react-bootstrap-perseus-loop-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61172e3c6854cb76a038cf824b66df090e14de7ea249bac4f0599eb783a7758e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140373 Malicious code in canopus-scorpius-kastra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4440eb9a52bb23a9e5c49cc79350174d4ee6e6de0608e1b396273bd4996232f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148400 Malicious code in supervisor-publish-cosmos-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568388e674b156aa64cb527778eca4e516be31d4c94ee45e60433044ec8377f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142891 Malicious code in gemini-arcturus-ursa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141871 Malicious code in elara-css-loader-tool-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcfdab25bdd37fdc86ad0a8ca819d6a524ddae94fca9e2727215f631b725a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146698 Malicious code in protractor-sagitta-xenos-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375ff0f14b90d3c243abb0c7b21bce0800591a64aa75e666438289eda3647e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-update-nestjs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706afd176ee6df8e6faa2ae433810bc6eea5e2fa845c2dcc19eb0868e4602449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-cressida-commitlint-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46504f4252ff87ca260f5be757ce7ecaa3594bf829bd535705879fe64ba14f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-quasar-gridsome-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf553b747a0fd06cff0c865d887c89b2f7bb1b22df3817b395eecf387d96b958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-local-venus-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22bf1918955e77a8b1f54fbd46b485b07f0694956808f5b42fb3e55fed8cdb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-charon-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132a3282516277f108b9368592cbb4dd3d3cce3637e6c9b4103a34bade58c83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-element-ui-sqlite-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e5be9b47f6694968a9eac77b11714a83793a8bb7e1fe43a9dea6c317f0e651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dbacc8fc1bfa1a561e8f8fae3f0884f286af2d6425eb54e8131852deba7f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-hermes-soap-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d020f29de3afe6cb948bf0aaf77863bd0e8e830591087dadf33cfbb7f2c86de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-apex-auriga-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c7d9c33c1fe060f13875ed63aedd8dceab8a256499a341f8cf222fe65488de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-mdx-geckodriver-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e66a65f7c92871312341129ec9fa61d291bde4e1563ac61a81dac4d5fb3e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...