Malicious code in rate-limiter-unuk-less-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f48b7e98a995af2a7a375936cb22752167fb03fc6ad0f8b998f41e42e5bf500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-virgo-prettier-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf0c2ff36e58cc35243ac8e68be82032aa3e1c00c0ac502474a893c01758736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-husky-kaus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f5507ab2a765098b7094518c0513e392911542fbd29ea2b6ac804164375eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-magellan-server-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f2acec02551e19c519fb08429a857027f87ac2d9ae888c056fe99dc5cc9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142076 Malicious code in envconfig-leda-websockets-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc05fa3cd9f4503e9a6ef3a2b9544d84ee3409950cb0aef2970cd01c032abbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141201 Malicious code in cosmos-browserify-transport-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37498829f631e70f8c332116a314debe135d287d9f5da1c3bb49572d356c2931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146169 Malicious code in phoebe-pavo-grus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a2a606b8dcb49d586718615dca3a20876645f3d5a3d5f21e04dd421df311d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-antares-chariklo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b721512cc47a4a37613f305324a66d29cc423e0fbfe0d78155a8aa93f41bd14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-sedna-adonis-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f6a18b05bbbfb0b1dc6c244b97d5ce8fb073ecd38758720a74adb3d57de635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-remark-sedna-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d0f28c1f7a44b41df0915d34c5170c7bf19f26924f8e1e5a8dee238cdee1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-betelgeuse-rehype-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a48502acfd313350e9d45d87806f205bf7af5f2f5fbf42dae81303c0359192b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-optimize-css-assets-webpack-plugin-callback-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4d26d4873796782551905789c7fd81ed92473600d7d9e682e8a4f349c24e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-husky-elektra-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397657c1f4752fc427c5c228a55cf0cbc4e0269830af8d4e9335b2378ad9d4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-cordelia-gacrux-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5df5ef2b61b37688c2f55bd46a28cf1c268628a6e43f3c21b47bcd8b8596d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-warp-luna-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ed97c2aaeb7c26b8e9eceef631438c73865ab60574f693b31a7d75e2709ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-selenium-chariklo-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf67a853928b37c4290d3a2685b95111adabafc9c129d86655e538fce1ef91a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-command-rate-limiter-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7abe993bf638dbe98c04283aed6d10f5a2bb33bcdb8c09e606063d2c0a09e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-gemini-wolf-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bd12bb3be8b01b050f726a8cd093fee2c9c5ad5226ec9d820cc45f66dbdc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...