Malicious code in triton-changelog-xenos-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a86aca0815621f69cf5d331bc8091efad1fcdce25c829787fc1a4df33c99fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-deimos-fornax-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a60f7cc7b169f8e1232d7a749adc3157ac3942569c9f447ff02e1dc726b000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-node-sass-deimos-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529397a0c3925e7719a49c6d9735e9ee960c0211188a69882b13263a692e1931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-taurus-callisto-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc032180d0a076e255d77641301840aef565ca59487ea2c3a303c859bb6d74b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-bulma-transport-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b901ab2b042e34d6b97c28bdbfc77d59d7599338dfb7cd5c7b18ddbb4e341a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-eclipse-supervisor-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebb5dce4cc6bedeb72dcfda54697e0c1ee9e4ab70e6f7c8640d9a4aed1b1e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-meteor-exec-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122e7097b25471597433a406c160c80c2b71d0f76c3ef49421322f2d34b31c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-impulse-slidev-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ae1f871514ee10efacea0fa8c481ee0c8e1e234293b01a5215f6c2c8d3e048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-orbit-iota-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd3a1d77cd0b196ec4a386bc4b71b8fbd27406a4eb552e4ba373f7cd79eb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-passport-module-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5741b69073dbce562dc456d306b14a68f27c7c3edea1b1cab27299e4d3b7ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147058 Malicious code in react-bootstrap-envconfig-juno-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3b146043bb3e56c6b2f0c6cbfd5dc3564919bd1004bdf4292a5db2e8fa8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140911 Malicious code in command-markdown-pdf-rollup-plugin-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77dfa1669c148ddf60045b113290cbf3a12671d386005e3a6accb1714ffce1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148482 Malicious code in taurus-uninstall-commitizen-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1a682f716f356bb60bb19ca4b742e28e0a2f687bd3c65928b836c790d0f8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-optimize-css-assets-webpack-plugin-vortex-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdaf001656f0e8395e386cb55cbb4a6a0e6fbc5feece1f143c58a49d9e4aa760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146161 Malicious code in phoebe-metalsmith-antares-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fca16066e644ed44cdfacbc49e496fdaf106242a6c75d6fa7eb39de9968b719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145448 Malicious code in nightmare-sequelize-proxima-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996a8a8a5d674102c7d58d84406b55a149e636642c28b0aed62ec8ad7a5b5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-enif-rimraf-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078814d063e1653768ceab42e4895287f704be8738fa6ad5ada0a2f48c65cd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145034 Malicious code in miranda-frontend-luna-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55817a1ac24be0c51e3cd4c4e8c579be5d62c9c64c9f10d6f6aa7ac1f47060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...