Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-ultra-electron-builder-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0816aaa7760bcc5127fb6d61c65977c0490633b576a152b843d3edcf79c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-aether-hugo-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5114b87d35b47d073d6ed470df9f820bdb04e3a4dfb72dc3c23d035f79c27096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-callisto-hercules-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d99f24f56cb7e133b01201ecd9215855d54fc7a3fa3079ad2d1d61ff216ac59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-chariklo-rimraf-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0be16292185703b19d81d57d39d2566605a656affe85387e75dfe92b2e94e7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-dione-server-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53d1dc1b407e9cc1a1581c522701747b64a945c07cbec90b2e213bb691954c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-publish-sedna-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a03fc8338b4b798f1a5808c0388729affd3e1aaf3ffed404918845befbbdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-ganymede-ganymede-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d447104cb20fe484889833bdb323e58a26301280d6177b41a8ced53b1abb2b6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-slidev-taurus-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c156244f8c0eb08d345ce4153b58ef1eac60e21468bfd95fed00021412c63ad7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-koa-version-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141883 Malicious code in elara-mini-css-extract-plugin-lynx-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0366b7f17be78889c22880bd1190e5627d5bd6527dfbdc5052a910a723993563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144452 Malicious code in lint-staged-delphinus-typeorm-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156dbe424c31b0b557485d7425baa456b1b7b461c9d9db75319dda86b377161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143413 Malicious code in husky-cli-axios-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e3ac914740a1f8e6ac85c3136819adc22fbba0178c57d910ad1afc930d0768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141589 Malicious code in dependencies-wasat-eslint-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156cd86e2d601b460757239dcc8be2e53759330ea90b0ff0ebce92acaa767702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146807 Malicious code in publish-prompts-dynamo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc122cc572c3d2d1191ceaaf9b9258aad88aba7da7c0c08509fe79058b68496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144391 Malicious code in library-transport-iota-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2344ee38fa070a53a841bad9565ace23b620ee3a3f80a0565f958d36b582ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139622 Malicious code in async-centauri-sirius-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca14a1da00800015fca446d7d09a88bfc7acac6b6e0fc7317667e1f503deaf6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147868 Malicious code in sequelize-global-regulus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6fbb2c60af525d77758d45c8ac6eb302d88c3211b99f14055380f61dc294be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142904 Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dbacc8fc1bfa1a561e8f8fae3f0884f286af2d6425eb54e8131852deba7f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...