Malicious code in sqlite-xanthus-proxima-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f32ccc9abe073ad5ce6305e68105a9f7b7780b19c76998a56b792af270ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-eslint-eslint-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af85ec1905427d26a8cb76ef206a0a384fba45266e161ae68cd007fa65ede164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-slides-build-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18801354375226d4226112eec2d62c8dadc9530120fa7e6ecfc8a365612fc872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-heka-spawn-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db5614c01d3e27e5f9eea4ed9ba6041855f567bcb63abe84b582e58f8116e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144355 Malicious code in levels-levels-ora-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4502d31e1f09441ce3987a7b5f54e91d5b3b26deb2544d135b60d2e3face816f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-loop-uglify-js-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc70419186bba0567af101a8404bb7c268c8f934572df8d12845a5ebc1301ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148908 Malicious code in ultra-shelljs-aether-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc7346b040e81bb689df3bed542cce8811d5d73d35a48936f4312edb9d0c62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-pm2-react-bootstrap-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d5bac178637bc480815d914746b942889f67c66d300e04b2109160a5ef251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146513 Malicious code in prettier-stylelint-oauth-dagda-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a71ca9cf122bb124c897b6679bb61b645e6812b59362397a8c70fe9fb150c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140196 Malicious code in build-ursa-hugo-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7043ea5597e37c18599f3323abe2d66201a04519ca5d9b94a7f1aa2905a9506b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147228 Malicious code in release-it-node-sass-browserify-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2823e5cc4583edbf1a87933cbf7ef0bdd7e810c0ca8fcce7267e6dd14fe9a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-pulsar-odin-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5e10a1e80dbe898a0eedbdd73f7c13bbd6e948693740434284cc0d8da36917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149309 Malicious code in webdriver-manager-blitz-browserify-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc0a4eff4c39f48a9eea63ae5964eeb9d4723510f3e9bd81c14c04e40883a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142608 Malicious code in fornax-blaze-regulus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42d941289830df9e458b4dbb4977d2dae6d081ed60d6e31cff91bbfd5fffa8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141346 Malicious code in csv-luna-loglevel-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39de5868daf7a7800d0aa668da6d9fb3265e2f881ca7e315c902452e2cea6df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-axios-pyxis-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf1171fdc7bfee894dac8408c7f6222af12050c3f1dda9013cebf17f229d5ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-yonder-global-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5c9f71ed37b602876a6f437776d9114a08afc52aab7c097268ee51bb86c541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139156 Malicious code in significant_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f8abc8d4aa9ffa2fa444ea71ccde61df434e0d48387cefb28ef5183d25712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-amaranth-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba61537ed8c5d8d3fe781e8c3ba1e4f33461ce56bce9f259eec377f198d7029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...