Malicious code in jekyll-dagda-google-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-nashira-blitz-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28e21e9bf524cbb8a38981d8287833ea31e36be5c9bc62a97d998ddfb499a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-ursa-hugo-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7043ea5597e37c18599f3323abe2d66201a04519ca5d9b94a7f1aa2905a9506b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-ophiuchus-grus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c0eab4b26c9903a2e8f6149673ca019e2febbd8835e556eec09face321dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-blaze-ganymede-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c36548131bc59eca950e04d1b40f3421ac426a7189a8aa205124a8688d65eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-npm-jovian-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f65ea012b56fdb0899a5fb284cea38652774f3b6d719c7ce1900fc6e8cf1733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-jekyll-vortex-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44add37c584676603eebcdad6641eb3d7bc89aed3f796216a360a469f27af9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-lyra-postgres-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f43dc858b148e1ce57af54b03bdb8e6c2aee6a4a902f6c4b576d5a9e2d46e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-draco-winston-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ff5a0f28a6222a7d93aa808e220ba1825c5aa59001690edf3821026626b821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-colors-pm2-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1c149e21cbd215ffdbc28c4860be05c7b5206df3ca1d464843e4d87357a7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7283a8213789ed347d62c1e73d10821e6eaaff86e044150ea8b56f0c99867860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-deneb-mui-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e52b99c6fcff081e31ec483416e07155aa049b9fecb93cb71ba0b66e3642d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-xenos-child-process-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89afd7046dc02e65e205937635f26c7474c3f5c9ba7e19863cb1fcd4455e0cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-init-public-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b6f0a6d5667e0cedcbb7fbd841a2db2f8e9b8547a9464c7ac846aca80daa5ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-hydra-cordelia-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d6330753c3485dd0c3aea450f2bf3977f19c73564ecb88f67cce4605e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-request-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be11fe39d7e45a17cb779900738bebd70482b33fa87aa5fcb66d39669a64763b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-luna-socketio-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ee266d139f89aff6fffba83237a702f6d2665de63832d7becb99225fceef2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141708 Malicious code in dotenv-meissa-zephyr-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00577d92ac72c5b95e8696e92641bbf766e8fb2bfcf75a4be0fa409f93fe250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141136 Malicious code in cors-semantic-release-eris-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0897310f2d4b7638a96531a08b14b6e2774efc0bb5cf2777926f172374a687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141083 Malicious code in convict-polaris-init-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c0db221a3ed1a1d284e3d0174535f98041c9d5fee2a0576d99d4514895fa75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...