Malicious code in terser-postcss-loader-bunyan-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8535f78567524d8b9c6926e20120a445a55b1ab1f7a69b7db5f380940c2fd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154163 Malicious code in dajouka-faa-sa12a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6793a7994fa7d5fe691663604d0ae48dbe137c0e57b95f23e1cc9fde62eac37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160158 Malicious code in masako-males-nb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7927142b1c649244f268a8f53196b2e73f8458ced1fd4466f6e8d064191e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-misuanuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd55cdcaceee8c17267dd774f7cebe43e2c0f7cde17dafa0dfc9ff4831d49a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151633 Malicious code in abuyilani-nikubamia-luyahambi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3edbbeb9e2d24ac1a21046e6acc94421d6c5e8f4e5a2dfd9dfa3ca97324324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149378 Malicious code in webdriverio-nightwatch-sequelize-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641664710fffd6ee624b0eb48165494b9d88e2bf41886b18ff51285c84b58123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b97127438dcbbd10fef63ece83b42f1a5e3134a3c7e277540f7700c35922cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125162 Malicious code in bella-kue37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71841c8fc2dd5d5fdb27d246a6cca1ef4dc72aa85f200b34ade10b8b36083caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119158 Malicious code in cindy-ruwet69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9697d4bd27db61231006c07d3dcf61dbd1028d4ad788db7bd6ae0b138c97271d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e895f0d4bc0e31d980c19f269861a4666ed6a8c1005d000d022fa1a7dd39d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-telur51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0ee59e0c454f1c5480df00fdde14c06ccc3a78f236a3b2db474697dd6cadda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-semur76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0ff463c10bc759e7369f1464f401f1d59b01b5512bc456f2d7ec42efa2ae6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4443202daed4b48d2604c185cea7f5ff307703cc4781c0a562ba6b07c784d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rolling_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac20d258a475d6a0d470243b55aab472b0995c4f0beb10362eb17fb56645acd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91569 Malicious code in utomo-gorengan20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05aceacedd773c044430a02c2ca84fd8ff1183c4d0809325231cb9d169eed069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81460 Malicious code in squealing_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d33994f6c88811e9d03615af2a6510e171f466591e2a9f93b61286f2084f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-violet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22ce9f3e331de55d5e56b36cb03d4947cca10426c7730ca4bf74917311db80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69966 Malicious code in precious-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a868de798424f93e115ba5b1142747f04d89aec910d57c55a7cf48a5e9f46feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55493 Malicious code in candra-klipo54-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d2bfdc89e5dacee6f39e2e513f7db88a6b0f77b4e651d32b355a38f170ead8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-keripik85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eef8a2ab86089d59129711bae7e46de2280206b10dd08b28bb4374aea8ef4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...