Malicious code in postcss-loader-scorpius-centaurus-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd95c0b4860dbb6693adebb4eb4bee696b2d9c115cda25ee2ee39158905c40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-oauth-rimraf-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b65ecf31bd469e11e4da7810c1f0f232b30db6958c9b2137eb22895f805e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-request-ganymede-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf998a0e7af42b71493aa693ca18e62cde4c66e8d1990b7c218436af02d9682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-nightmare-postcss-loader-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32ad78d5c1b5a3137b663ae91f27e0355dcea0816dbe228c0eebaa243099d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-eridanus-iota-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aa2b88d2e7d66ee39513bfc1364e086fda5473dc9a5bdf8acb712cfd322ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-atlas-oauth-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cff2e1a60b148d3151b2476f58874193bbcecd8ddd2bfee1f592bde3031ced7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142415 Malicious code in farout-indus-iota-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6f2da59c9af0e54ae6294798270600d6aaca512e3300354d315d1a0509d747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149641 Malicious code in xenon-ariel-foundation-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154d686ffc4faf29ecd3c0b4334cde0d87fc570fce3cba8794a8fc683629e863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149863 Malicious code in zenobia-bellatrix-gravity-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1c29f1918a6f636e7b6bd048f770510b7604e2b3c0b585ce4537f242137fda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145311 Malicious code in nconf-dorado-blaze-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ebb80e8bf00b13131bbcd85b50a8f37549e9e91d183e6378da97c6b1847e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146164 Malicious code in phoebe-morgan-install-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab149e6b00233a3917e702b778911be536e064049d6f4363b601405122a9e30e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149471 Malicious code in wezen-uglify-js-stop-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cb747f817d3854691f2f4e78d85638306150ffa98f5d294bc280cfc35f51d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145770 Malicious code in octans-halley-phenomic-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10aa7281e2cd760e3e8919d3fa577ef77554cf9e2f9b5cdd818f2c38c3a0659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-helmet-telesto-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7679ea7ca27cc8b5ba3c2132e37b1bc1dbea0f92c14cdb6fcb9ce04322da927b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141235 Malicious code in cressida-ini-markdownlint-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65662cda736d980784b56270f444cf897c757c5fde067bd14ebded2277d2d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140379 Malicious code in capella-axios-build-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de1782855692574879b52f874525f81e799648d8226dcd053e2552dc17fcfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-query-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505950e51b56d621a77add998a0876538ff548e95b7af30b6c58c1158b1a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-indus-quark-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeff126d4d9dae822df5c1ba07200edc2513a45a3299d7100ab54cfe4c4a5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...