Malicious code in enceladus-vuetify-foundation-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72476d2b806b3687d1fa43ef3713ada1a16d869cb5a1f91e4df2ed45c57b6dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-commitlint-config-angular-iota-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8b14fd937755bb3ed6186adeb8bde0cbd8363c9578b97421772e07f4e77ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-hexo-blitz-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44be45fdde61cdce0f1f9666eb2a13f985e7e09710708a60db96f21303c6011c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-quantum-miranda-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f72622ee9f60adeb5f780beefca8e1efd2fb397f3f46dc1ae0ab8ef0a1b15de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-luna-solis-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bba943fa330cdb3d3878a5ffc09d78a6df573ce8fa64f6f6e36f25fcdd1d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140220 Malicious code in bulma-mysql-polaris-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642e49e59bbbe4ac10f5aa70b2452a7dbfe7d5a9928016d8a8fe291fbf43801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142918 Malicious code in gemini-server-ini-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5d0360722cdc73ccb7eac133b17b09cfa918f7f0436c2a0cfa464bd4b5a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141461 Malicious code in dagda-aquarius-postcss-loader-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f696dec9028c1ccf5ff7366778658b3df225e2bc8174ac216fa5b5fa5a39e8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139387 Malicious code in andromeda-xenos-relay-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a0e5979a37668f23e180bde79ead45f1bedefb653cbdb6a846c2c4d8a99c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-venus-fetch-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c734b28d4aee59abf5e705cf6d757d1ba1faa5d4ae58881d3cdddfb0b0d70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-gulp-sync-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-jovian-carpo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5489fcc6a14ec6966ae4d1643fad8c37bf6bca505d7659f928e3f7964fad9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-oauth-dagda-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d96603a56c37184c791059cbb316e67d2ea8fdaa3ca83e5761b93ba7c154a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-build-regulus-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0954309485e0116cd28f04502a67aedc87c6618aea4622ff3fe8d3b154f2583b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa5e7c9dc3d753d65b3a92dae95e45ef42619f35d4b3c87f3f5db8bc96069e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-cassini-pulsar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e8e927bd62ce7358f795913151aeaae657720f69b6b7212b7fafccc1976541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-eslint-apollo-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6abd831119b104609936a6a3bb0b6b7570562aba1fdab4618704795897a51640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-css-minimizer-webpack-plugin-kinetic-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3e37d1cf32921aa706fc4ffd97c8fe9ad694e5c8c7a37d55e39241b81f6b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-module-puppeteer-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b903f0dbe26ac625de626c67bb566688e158ff9bacc80e7f4f8ee0bb7d5b7012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-octans-csrf-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad782e8410ebf0acd6ca7e645af374b1c97296fe8279c828a59984a30eb1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...