Malicious code in nextjs-sagitta-backend-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d30433018a5273b06b2934b8e3c126a9eacec0a1c317401dac6dd8848fadecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187754 Malicious code in less-loader-grus-void-biosignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99eb889dc1cf69b2085a517f688f0af0a888445aef6063056bcdef36537a018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-io-sass-loader-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef20101ee38f63c38e24ae8f075da72835328afa3145f6b4e7eeca7e3e984ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186556 Malicious code in dependencies-nova-meteor-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501435bf55002173c8f7d5b4c21b3d56892072239bd53de9e1caee62f283e9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188778 Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186852 Malicious code in eslint-tardigrade-gammarayburst-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6ba0986e5b3fa90399d98555fce56050736ff52b31ceb2a66250e086fda217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181193 Malicious code in @akunsansan0/biru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a64fb5f661323031fad639dddf6c4b1de8106a80455c7b4c387ed600e053ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172947 Malicious code in anidata-hd-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef7118b38c8c3a55564fc1c4a30fc71b62428622f6e96bba15d7d6ed6c1b200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ameerhussain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45696d279943f3b0ff78a49914b278c0254b8c9d27e1237fcc988f64dbccd7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164103 Malicious code in pilau-akvu-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ba35902c0c1210305d39f2ddbe4081de0d0c283a5f77de8a1df9e8e1667ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167485 Malicious code in teagood-nalikami81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c0761a92befac17cb3a4cf0a2a1bae8f2dc46af1b9f142d68062cf09331cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149938 Malicious code in @mipta1/asarar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0a963a4e6504bb71e5b53a299d38f4db61abb00134575ea384977e5ae8dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-aldebaran-centaurus-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848c05467d4a74d0a113c3fa27e3891f6fe22ecb24978863656a14c2c6810b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-kastra-hydra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff37cd335a423752dd8b1bfcf8707b83cc0ff0e4471cb874fb88f228d745ad08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-dione-publish-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff882e7626745936fd70d55ac96b8390b9cd80e97eff19f2a3bb2a37cf345a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-cygnus-chariklo-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896f80547b404fb50cbadc8829b66a71a8905c7345dbd84caa6331254ca7f91a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-mdx-aurora-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b68d4bbf9b461dbf984128d8547052b0cebeff32e91ea0cb65ef648bc2b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140259 Malicious code in bunyan-vuetify-apex-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a8d46cff109bf2f2709cdfa691b1c0f42309b1a882f34f95bbbb32fbe05844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-quito-typeorm-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d835e8e0d74ec55eb6e9aabcd80148a390649445d256ee27fa0fe751eb1619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-eslint-config-grus-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10280db9a005e16f95c876d3375736045932bf720e9a1a30bba1447072fd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...