Malicious code in polaris-stop-build-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a373d1a5eb1fb842a336b3d3996d1ff50d85dbdbcf45ce246eec4e06c9cda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-pipe-janus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cf70b023c5a2030e7b0b477fe8e7e00b2788618c9cb5e318879b46b9e30063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-metalsmith-ignite-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f8d1b4005ff300bf85096906929c42441da1b129e398d9053f3b4a03241c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-solis-promise-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3c59989ecc8eae4a83da38af7837d57dde9a10c501c636c5a57588afabd2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149249 Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb779a176a4c829aea3911dc0bc2e0fc29f6318b8e37e107ee22406818d887d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139719 Malicious code in auth-css-loader-node-sass-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99a2e6d84ab0f17f54374c0b9562b0a16562928b0e7327a3436d9e2b0320a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-grus-rigel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a756eb41b87e1ab320a650e477863fcc7edbdc9c4a284b3976c2468ae303845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145405 Malicious code in nestjs-terser-postcss-loader-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea7dc9bb5fec3e638d15d76e199ee6a1c671cd51e20914ae74fbfcf10853450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-spectron-colors-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ca0d32d9252e9391a2a4897d756ec63df61d8558401790307a3a375ad8f331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-version-rimraf-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8e258cbbd7b05fc7b948248f6d0922d4fcb8d1fd555abab444074a2c1a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-chromedriver-sagitta-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06f2eec608e17c83e990fe681b4c5261e230d77ce9cac37d95422b793606bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-morgan-node-config-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe43159bc0974aac91edb5f44d4b66b85095c6302b7f08f0471d81541e415a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147225 Malicious code in release-it-meteor-dorado-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3755e6d01fdcf763409974695f12351f93b654a310788cde0a4769a27eb88579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical-tan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce259aa8c0f820704c5dbc6c6e654b32f6f71b2975d0027a982606e68105814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138617 Malicious code in coherent-plum-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-gorengan69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5f173870da0b4ac7d6dcdbe418701dc25577feb788de6125ad504428269d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tempe53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3620465b359dde723ba08a4db40a653a86077a815995a5b4a25e8b97b471f77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc8d3d6058446b59afa8b0ffbf7eed249287920b5d5ee66788eaabfd8e1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7a3d3884b00bc6779cdaed99c6a6280d73c1784f08bb6dc3cf55a60845aacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...