Malicious code in npm-cressida-antares-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e077222905d8156a630abb6c49f2ebdaa023e818242f76ceac1de7292a6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-hapi-cordelia-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2782e9e52c196340de0e31caff03aa3bee08b7d416ac2a4d310277517eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-mongoose-corvus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b778f62ff3e50c7e087b010f41e56a52e5f270155f52bed36a78f8f40085da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-terser-rimraf-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369b39705936e81e044143deeb3d264e0c799da1d7145d7a34a47964089ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-materialize-meissa-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7431473a2a7d044e265be1ea3717a4e6f421228d6e8498e8954d81e8b54ed221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-cressida-sequelize-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d60ba7cda25cda3a3bfc8e15b4f112403cc1c5df0679ff03785c3356c1e4229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-octans-grunt-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b602d370f1083a15d9a1ec3d3af5636eadc38249b8279136e2dfa493a1c039a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-kronos-aurora-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02998f5866080f53cd6472b39a98ec84ad72333e9427068bd1785888188c3216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146484 Malicious code in prettier-plugin-markdown-hydra-sass-loader-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912385a3bb19c421f288dd110a2997827a37baa24d0ef4aded1e7b5bfed9ee5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145304 Malicious code in nconf-babel-leda-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd58af62c423f22dc1dd348dd58260892dca5d44f791cf0bdced57cc4e3d30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140154 Malicious code in buffer-celeste-prettier-plugin-markdown-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0b93c3ef015e6aa400f4106766563254f0e2fc58bd1dff4a01ee9921e39aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144822 Malicious code in meissa-passport-nightwatch-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bfdbeaa33d509303893aa88ba142a86d0c594efb237776d47613f604bb0d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144389 Malicious code in library-slidev-test-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3036c47dfda9e4604810893bb13f98e286e516097002878c86f274c10ccde76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145239 Malicious code in mysql-babel-cassini-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40143ba548c31793f042cdf340fc83a0f912cc7d59d8f0b4b7004398a8425066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146403 Malicious code in postcss-loader-npm-child-process-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2baa6ea4e8409b7545bd6962018674d00a779c56899d8c1f5ab8aa47645dc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146954 Malicious code in quasar-jwt-chariklo-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e96037d1d468c6657b8199569db480a0d764b88149d9dc46c87c1d8bfd2d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141910 Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7777d64a1343f42e8f80d8f8f3cde9e71dd74d38f9850534c9214756d79df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145193 Malicious code in mui-altair-winston-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec698e61543ad380ee240f73da03f38591755503d7151b0f7073d3b8db12176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141474 Malicious code in dagda-jabbah-xenos-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678aea84d3e17daf26a71a1227863e69cfc430bb5d394a840da880b8ae787a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145602 Malicious code in non-blocking-apollo-proxima-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075b4ab62f509004731e1c2bd1277e8fbd04dc6618024de17b3e217fe8e76e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...