Malicious code in orbit-europa-dorado-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86991b0a2dcb6678d771ebd29e9bac476729c647cd6c41b03821e32b1084eed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-bunyan-centaurus-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7041aeb6d4b6daae8b199986a9b05f5f12ff05ec198d264fea5a5274b2a9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-io-quasar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463aa37c4b880fa305a254100385206be26e5f5ddb3ee65314eb015fdfac0cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-public-version-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc3b96a48c694acf88349bc3335188f0008975d6ce32521775b2876d3896a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-hercules-janus-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546044f30a3c8d955fe920282e9d5666f3751d680bafd4e63c08e0bbda5b156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147448 Malicious code in rimraf-dagda-sass-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b08cf31ae06b8cfe4006f906ef9b24fd19a4e3179eb3ac12b3d42f4a7e37ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117413

Malicious code in endless-indigo-marmoset npm...

MAL-2025-134568 Malicious code in jaja-ronde69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d74f4048bbac8408b3c1bf5ac5f6754975662c7749ce82d4d3f08cbd4cfcda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99285

Malicious code in endlessgoatz3n npm...

Malicious code in putri-tek87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f24f844512443417113b060c71dce22d903431ac560f543b33dc5092b78811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99283

Malicious code in endlessgoosez3n npm...

Malicious code in ida-mie71-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6668295f0c751106b00213c8fe49f2603af847833ceecbf303c2f8c42808207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128338 Malicious code in loyal_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9697e97da4254e03b70bdde7dde756c4691f1c42f5a7e975f9d7cbc7a2d212a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127602 Malicious code in jaja-lontong98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa85faa5c08b32c7a49ee67a361530253ee83887bd444d029345f2132fec41eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105565

Malicious code in endlessrattlesnakez3n npm...

Malicious code in cici-mieayam74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9596fb709e9b880cd3bfcf52700402ca9d1b2e875e461b6c96dc8a6c15dec55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superb_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037a3c9856742d4ce0e67d4f6ec7ab61719cef7c007ddba74d514a2da245f999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_kite_cyan-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0df1224bf167b553d1bc1ec87b383d7436594e35e2e5766e1a7548951813bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_tiglon_orange-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ba0b359ffd617de7cf8d2ab1653f42c16aebbcabf7d684324110fb25fca7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_orangutan_lime-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0306fa64efe7b1408c7cebf751203ee153b196749741a1e56229d0f8e599086c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...