Malicious code in ignite-supervisor-mocha-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c036900e6f404ea72aa85a4bf54d4a73318c1e65912111e0b97c5588f50e239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-postcss-hapi-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01be8cfa96e4044e64f8c668c0d1417368b0897ee88586a73bd7dd7c873c629d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147383 Malicious code in restart-helios-metalsmith-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eb87ce92ab285b72ad75a25b3357183a98accf962cb853dcec26bebee2f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149149 Malicious code in virgo-backend-hermes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05940c7f294c6b60ca9948a699c21c99f5ece74f5993de0fd374cd1fabcc5464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148013 Malicious code in slidev-xanadu-xo-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf83cbecd9577fec842ad64f7f847b168a1ad3aafbbfbceda5b0741cc06aac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-terser-webpack-plugin-electron-builder-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1521d29b7910c673bac1da6ff3a09896aa8e25965febae2a825ae1c6fa082719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-test-ganymede-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d553a01be402a08f876c80f5c3bd81ea7a7f426a4a848f6c7fdfb64fa4283b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-slides-hermes-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e63cecb4f67a5cae4d7754df39a7799fd4bef7fcc25844e5a7c576e1e31ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-pegasus-mini-css-extract-plugin-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd25cf15f924783c9c0dd4ff35111ce8a5bb6b596dd67ab342567c9a9f3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-kastra-mui-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9153be71dd128015064d23635b4510d601f804fe1986f5a7a8af04062f75c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-loglevel-io-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead7d669a16636bce25e9661811f5f47280b40ab64ea3c1e3cc047c9667dd643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-winston-schema-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fac4ee9fecd205ce5a6a0d6f2d2fff5c73dc9b66e1cfa9181d4316724a6a246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-perseus-lyra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e87733bd5fd700c182b2fe085a507461f9325ca6dc4644112ee05a9b4d5f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142601 Malicious code in fork-update-stop-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5331a6d75858fe3170dba64a50135d689c71f8234b42cf0dc3368ba3ddfe1234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144030 Malicious code in juno-loopback-tailwindcss-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed40b84ddbb296e2da31d1c24d9acb00f278cc44f7ec2cbe040a1547517e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142371 Malicious code in express-delphinus-odin-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d12de1692a296b43888026ae5f4cf6d26cb58c03051a26680bde2d2a9829708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-vuetify-metalsmith-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2186526dff27c6c4fa856cfe4c9936a3d13ab0f924c3f55f611a9ca589374cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-google-polaris-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0301889cd3284c9ff6e51b0f6cc4788055d9fafeeaebd71b19ab0eb2888869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-pyxis-rollup-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825b2089e674a1b4f07d988dd4dd46073f675eb1896bfdf21ad1489f1458389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-kinetic-mongodb-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bbffb1173d5dcc002853b4ba9935cc827963528dfd53c8d8d7e443f7d17d8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...