Malicious code in callisto-quasar-dependencies-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604d3dacddd158e06c565b4ee035b92a9de3a096a10283e17147509ac98b4380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-global-commitlint-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e439146265fc847c2ba6635b34bdf04eab81a50a6bb7b732c0b65b4b98dd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-cassini-socketio-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ab95f0501dc0a030fc5556c18a95ff3c795c37a88420e23f40f0791373f795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-inquirer-astro-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ffcbe48d8e1d6ed0e95d7e609992f48ef97bd31136729a5141f9a3fb4c0424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-less-loader-grunt-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb982d6776874e40aa7709ce42d3645a50c6612d45d9a0a2c46a365ca6620f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-transform-callisto-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6aff6f665f5d65e9160b95c96f0f11f50c7be5f51cc556bf3a6bb92a1f1324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-ursa-nodemon-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c8ef633f483964dc26c0274ee176e28dfbf8faf7ca47094bdec593aed66d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-oauth-ariel-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1475c669a38ca0f0cebf7c8a172f9d05e4b1b9b909012c8a62416ebae573e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-jabbah-axios-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb514dc69b97db26c0206a29a61c0a101baaab726b1e5cb364a3d76a6c7a51de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-blitz-mutation-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f55a3d1837c6187591f05ff77aecde65c5efc3ddac721b99369b3e052d02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-halley-run-script-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f9d77e7486f19b392694db7b12727b81676372ad5fac67df6db7cc8e333163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-concurrently-library-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d58bd48897e3f098d0b7eb12450b06e34f0a9ad06264bac2b26370b02219c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-loopback-enif-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b262f3dda7c4c884473fc437198ad7e57eb99f347ca9809993ad238590768e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-parcel-convict-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3887411420b633571876d73bdc8d64a712e76bcccdfd293ea444bddc36a38c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-firebase-websockets-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35edd70c25194ae66d720396c439e8b01bd6fa5446b6d013e5813efc3072676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140861 Malicious code in colors-puppeteer-got-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788ee5ebff473dad8df11e086642382331492615ac2e657a5d1576b67ab64f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146398 Malicious code in postcss-loader-luna-eslint-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339b954ad1c5820bcd5e07e8b57037f08a5208d8bb38e2159a7c89fd9ba3735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145202 Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140023 Malicious code in blaze-hapi-cordelia-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2782e9e52c196340de0e31caff03aa3bee08b7d416ac2a4d310277517eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149790 Malicious code in yaml-gatsby-yildun-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9176cc856a7e1b77aae4968733ab2bea8d8ddf71d2233a9e6f1ef1c0f9e0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...